Oct 2 20:30:03.019916 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 20:30:03.019942 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:30:03.019953 kernel: BIOS-provided physical RAM map: Oct 2 20:30:03.019961 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 2 20:30:03.019967 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Oct 2 20:30:03.019974 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ff40fff] usable Oct 2 20:30:03.019985 kernel: BIOS-e820: [mem 0x000000003ff41000-0x000000003ffc8fff] reserved Oct 2 20:30:03.019994 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Oct 2 20:30:03.019999 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Oct 2 20:30:03.020007 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Oct 2 20:30:03.020016 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Oct 2 20:30:03.020022 kernel: printk: bootconsole [earlyser0] enabled Oct 2 20:30:03.020028 kernel: NX (Execute Disable) protection: active Oct 2 20:30:03.020036 kernel: efi: EFI v2.70 by Microsoft Oct 2 20:30:03.020047 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff85000 SMBIOS 3.0=0x3ff83000 MEMATTR=0x3f5caa98 RNG=0x3ffd1018 Oct 2 20:30:03.020055 kernel: random: crng init done Oct 2 20:30:03.020062 kernel: SMBIOS 3.1.0 present. Oct 2 20:30:03.020069 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/09/2022 Oct 2 20:30:03.020075 kernel: Hypervisor detected: Microsoft Hyper-V Oct 2 20:30:03.020084 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0x64e24, misc 0xbed7b2 Oct 2 20:30:03.020091 kernel: Hyper-V Host Build:20348-10.0-1-0.1462 Oct 2 20:30:03.020099 kernel: Hyper-V: Nested features: 0x1e0101 Oct 2 20:30:03.020108 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Oct 2 20:30:03.020115 kernel: Hyper-V: Using hypercall for remote TLB flush Oct 2 20:30:03.020125 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Oct 2 20:30:03.020131 kernel: tsc: Marking TSC unstable due to running on Hyper-V Oct 2 20:30:03.020139 kernel: tsc: Detected 2593.907 MHz processor Oct 2 20:30:03.020148 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 20:30:03.020154 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 20:30:03.020165 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x400000000 Oct 2 20:30:03.020172 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 20:30:03.020180 kernel: e820: update [mem 0x40000000-0xffffffff] usable ==> reserved Oct 2 20:30:03.020190 kernel: last_pfn = 0x40000 max_arch_pfn = 0x400000000 Oct 2 20:30:03.020197 kernel: Using GB pages for direct mapping Oct 2 20:30:03.020206 kernel: Secure boot disabled Oct 2 20:30:03.020212 kernel: ACPI: Early table checksum verification disabled Oct 2 20:30:03.020220 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Oct 2 20:30:03.020228 kernel: ACPI: XSDT 0x000000003FFF90E8 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:03.020235 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:03.020245 kernel: ACPI: DSDT 0x000000003FFD6000 01E184 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 20:30:03.020273 kernel: ACPI: FACS 0x000000003FFFE000 000040 Oct 2 20:30:03.020283 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:03.020291 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:03.020298 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:03.020308 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:03.020315 kernel: ACPI: SRAT 0x000000003FFD4000 0002D0 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:03.020327 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:03.020335 kernel: ACPI: FPDT 0x000000003FFD2000 000034 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:03.020344 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Oct 2 20:30:03.020352 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff4183] Oct 2 20:30:03.020358 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Oct 2 20:30:03.020367 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Oct 2 20:30:03.020375 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Oct 2 20:30:03.020384 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Oct 2 20:30:03.020394 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Oct 2 20:30:03.020403 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd42cf] Oct 2 20:30:03.020410 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Oct 2 20:30:03.020420 kernel: ACPI: Reserving FPDT table memory at [mem 0x3ffd2000-0x3ffd2033] Oct 2 20:30:03.020428 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 20:30:03.020435 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 20:30:03.020445 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Oct 2 20:30:03.020452 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] hotplug Oct 2 20:30:03.020459 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2c0000000-0xfdfffffff] hotplug Oct 2 20:30:03.020471 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Oct 2 20:30:03.020478 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Oct 2 20:30:03.020486 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Oct 2 20:30:03.020495 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Oct 2 20:30:03.020501 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Oct 2 20:30:03.020510 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Oct 2 20:30:03.020518 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Oct 2 20:30:03.020525 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Oct 2 20:30:03.020534 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Oct 2 20:30:03.020544 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000000-0x1ffffffffffff] hotplug Oct 2 20:30:03.020551 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2000000000000-0x3ffffffffffff] hotplug Oct 2 20:30:03.020561 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x4000000000000-0x7ffffffffffff] hotplug Oct 2 20:30:03.020568 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x8000000000000-0xfffffffffffff] hotplug Oct 2 20:30:03.020575 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00000000-0x2bfffffff] Oct 2 20:30:03.020585 kernel: NODE_DATA(0) allocated [mem 0x2bfffa000-0x2bfffffff] Oct 2 20:30:03.020594 kernel: Zone ranges: Oct 2 20:30:03.020601 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 20:30:03.020611 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Oct 2 20:30:03.020619 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 20:30:03.020627 kernel: Movable zone start for each node Oct 2 20:30:03.020637 kernel: Early memory node ranges Oct 2 20:30:03.020643 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Oct 2 20:30:03.020651 kernel: node 0: [mem 0x0000000000100000-0x000000003ff40fff] Oct 2 20:30:03.020660 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Oct 2 20:30:03.020667 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 20:30:03.020675 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Oct 2 20:30:03.020684 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 20:30:03.020693 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Oct 2 20:30:03.020704 kernel: On node 0, zone DMA32: 190 pages in unavailable ranges Oct 2 20:30:03.020711 kernel: ACPI: PM-Timer IO Port: 0x408 Oct 2 20:30:03.020718 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Oct 2 20:30:03.020729 kernel: IOAPIC[0]: apic_id 2, version 17, address 0xfec00000, GSI 0-23 Oct 2 20:30:03.020736 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 20:30:03.020743 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 20:30:03.020753 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Oct 2 20:30:03.020760 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 20:30:03.020771 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Oct 2 20:30:03.020779 kernel: Booting paravirtualized kernel on Hyper-V Oct 2 20:30:03.020788 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 20:30:03.020796 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 20:30:03.020805 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 20:30:03.020813 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 20:30:03.020822 kernel: pcpu-alloc: [0] 0 1 Oct 2 20:30:03.020830 kernel: Hyper-V: PV spinlocks enabled Oct 2 20:30:03.020838 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 20:30:03.020851 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2062618 Oct 2 20:30:03.020859 kernel: Policy zone: Normal Oct 2 20:30:03.020867 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:30:03.020877 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 20:30:03.020884 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Oct 2 20:30:03.020892 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 20:30:03.020902 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 20:30:03.020909 kernel: Memory: 8081148K/8387460K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 306052K reserved, 0K cma-reserved) Oct 2 20:30:03.020920 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 20:30:03.020928 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 20:30:03.020943 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 20:30:03.020954 kernel: rcu: Hierarchical RCU implementation. Oct 2 20:30:03.020962 kernel: rcu: RCU event tracing is enabled. Oct 2 20:30:03.020973 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 20:30:03.020980 kernel: Rude variant of Tasks RCU enabled. Oct 2 20:30:03.020989 kernel: Tracing variant of Tasks RCU enabled. Oct 2 20:30:03.020998 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 20:30:03.021005 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 20:30:03.021015 kernel: Using NULL legacy PIC Oct 2 20:30:03.021025 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Oct 2 20:30:03.021033 kernel: Console: colour dummy device 80x25 Oct 2 20:30:03.021043 kernel: printk: console [tty1] enabled Oct 2 20:30:03.021051 kernel: printk: console [ttyS0] enabled Oct 2 20:30:03.021058 kernel: printk: bootconsole [earlyser0] disabled Oct 2 20:30:03.021070 kernel: ACPI: Core revision 20210730 Oct 2 20:30:03.021077 kernel: Failed to register legacy timer interrupt Oct 2 20:30:03.021086 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 20:30:03.021095 kernel: Hyper-V: Using IPI hypercalls Oct 2 20:30:03.021103 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 5187.81 BogoMIPS (lpj=2593907) Oct 2 20:30:03.021114 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 20:30:03.021122 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 20:30:03.021129 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 20:30:03.021147 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 20:30:03.021156 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 20:30:03.021165 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 20:30:03.021173 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 20:30:03.021182 kernel: RETBleed: Vulnerable Oct 2 20:30:03.021190 kernel: Speculative Store Bypass: Vulnerable Oct 2 20:30:03.021197 kernel: TAA: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 20:30:03.021207 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 20:30:03.021215 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 20:30:03.021222 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 20:30:03.021232 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 20:30:03.021240 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 20:30:03.033679 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 20:30:03.033716 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 20:30:03.033727 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 20:30:03.033736 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 20:30:03.033746 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Oct 2 20:30:03.033755 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Oct 2 20:30:03.033765 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Oct 2 20:30:03.033775 kernel: x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. Oct 2 20:30:03.033784 kernel: Freeing SMP alternatives memory: 32K Oct 2 20:30:03.033793 kernel: pid_max: default: 32768 minimum: 301 Oct 2 20:30:03.033801 kernel: LSM: Security Framework initializing Oct 2 20:30:03.033811 kernel: SELinux: Initializing. Oct 2 20:30:03.033827 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 20:30:03.033836 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 20:30:03.033847 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8272CL CPU @ 2.60GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 20:30:03.033856 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 20:30:03.033866 kernel: signal: max sigframe size: 3632 Oct 2 20:30:03.033875 kernel: rcu: Hierarchical SRCU implementation. Oct 2 20:30:03.033886 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 20:30:03.033895 kernel: smp: Bringing up secondary CPUs ... Oct 2 20:30:03.033904 kernel: x86: Booting SMP configuration: Oct 2 20:30:03.033914 kernel: .... node #0, CPUs: #1 Oct 2 20:30:03.033926 kernel: TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. Oct 2 20:30:03.033937 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 20:30:03.033947 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 20:30:03.033955 kernel: smpboot: Max logical packages: 1 Oct 2 20:30:03.033963 kernel: smpboot: Total of 2 processors activated (10375.62 BogoMIPS) Oct 2 20:30:03.033974 kernel: devtmpfs: initialized Oct 2 20:30:03.033983 kernel: x86/mm: Memory block size: 128MB Oct 2 20:30:03.033994 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Oct 2 20:30:03.034008 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 20:30:03.034019 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 20:30:03.034031 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 20:30:03.034043 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 20:30:03.034056 kernel: audit: initializing netlink subsys (disabled) Oct 2 20:30:03.034068 kernel: audit: type=2000 audit(1696278601.024:1): state=initialized audit_enabled=0 res=1 Oct 2 20:30:03.034079 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 20:30:03.034089 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 20:30:03.034101 kernel: cpuidle: using governor menu Oct 2 20:30:03.034113 kernel: ACPI: bus type PCI registered Oct 2 20:30:03.034123 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 20:30:03.034133 kernel: dca service started, version 1.12.1 Oct 2 20:30:03.034141 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 20:30:03.034152 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 20:30:03.034160 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 20:30:03.034169 kernel: ACPI: Added _OSI(Module Device) Oct 2 20:30:03.034178 kernel: ACPI: Added _OSI(Processor Device) Oct 2 20:30:03.034187 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 20:30:03.034198 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 20:30:03.034206 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 20:30:03.034216 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 20:30:03.034224 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 20:30:03.034234 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 20:30:03.034242 kernel: ACPI: Interpreter enabled Oct 2 20:30:03.034262 kernel: ACPI: PM: (supports S0 S5) Oct 2 20:30:03.034272 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 20:30:03.034281 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 20:30:03.034291 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Oct 2 20:30:03.034302 kernel: iommu: Default domain type: Translated Oct 2 20:30:03.034310 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 20:30:03.034320 kernel: vgaarb: loaded Oct 2 20:30:03.034328 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 20:30:03.034338 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 20:30:03.034347 kernel: PTP clock support registered Oct 2 20:30:03.034358 kernel: Registered efivars operations Oct 2 20:30:03.034365 kernel: PCI: Using ACPI for IRQ routing Oct 2 20:30:03.034374 kernel: PCI: System does not support PCI Oct 2 20:30:03.034385 kernel: clocksource: Switched to clocksource hyperv_clocksource_tsc_page Oct 2 20:30:03.034396 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 20:30:03.034403 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 20:30:03.034412 kernel: pnp: PnP ACPI init Oct 2 20:30:03.034422 kernel: pnp: PnP ACPI: found 3 devices Oct 2 20:30:03.034431 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 20:30:03.034440 kernel: NET: Registered PF_INET protocol family Oct 2 20:30:03.034448 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 20:30:03.034461 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Oct 2 20:30:03.034469 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 20:30:03.034480 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 20:30:03.034487 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Oct 2 20:30:03.034499 kernel: TCP: Hash tables configured (established 65536 bind 65536) Oct 2 20:30:03.034506 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 20:30:03.034517 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 20:30:03.034525 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 20:30:03.034534 kernel: NET: Registered PF_XDP protocol family Oct 2 20:30:03.034545 kernel: PCI: CLS 0 bytes, default 64 Oct 2 20:30:03.034555 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Oct 2 20:30:03.034563 kernel: software IO TLB: mapped [mem 0x000000003a8ad000-0x000000003e8ad000] (64MB) Oct 2 20:30:03.034571 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 20:30:03.034581 kernel: Initialise system trusted keyrings Oct 2 20:30:03.034589 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Oct 2 20:30:03.034599 kernel: Key type asymmetric registered Oct 2 20:30:03.034607 kernel: Asymmetric key parser 'x509' registered Oct 2 20:30:03.034615 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 20:30:03.034627 kernel: io scheduler mq-deadline registered Oct 2 20:30:03.034637 kernel: io scheduler kyber registered Oct 2 20:30:03.034645 kernel: io scheduler bfq registered Oct 2 20:30:03.034652 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 20:30:03.034663 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 20:30:03.034671 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 20:30:03.034681 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Oct 2 20:30:03.034689 kernel: i8042: PNP: No PS/2 controller found. Oct 2 20:30:03.034850 kernel: rtc_cmos 00:02: registered as rtc0 Oct 2 20:30:03.034943 kernel: rtc_cmos 00:02: setting system clock to 2023-10-02T20:30:02 UTC (1696278602) Oct 2 20:30:03.035027 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Oct 2 20:30:03.035038 kernel: fail to initialize ptp_kvm Oct 2 20:30:03.035048 kernel: intel_pstate: CPU model not supported Oct 2 20:30:03.035056 kernel: efifb: probing for efifb Oct 2 20:30:03.035066 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 20:30:03.035074 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 20:30:03.035085 kernel: efifb: scrolling: redraw Oct 2 20:30:03.035095 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 20:30:03.035105 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 20:30:03.035114 kernel: fb0: EFI VGA frame buffer device Oct 2 20:30:03.035125 kernel: pstore: Registered efi as persistent store backend Oct 2 20:30:03.035133 kernel: NET: Registered PF_INET6 protocol family Oct 2 20:30:03.035140 kernel: Segment Routing with IPv6 Oct 2 20:30:03.035151 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 20:30:03.035159 kernel: NET: Registered PF_PACKET protocol family Oct 2 20:30:03.035169 kernel: Key type dns_resolver registered Oct 2 20:30:03.035178 kernel: IPI shorthand broadcast: enabled Oct 2 20:30:03.035189 kernel: sched_clock: Marking stable (767882000, 23262800)->(999444200, -208299400) Oct 2 20:30:03.035197 kernel: registered taskstats version 1 Oct 2 20:30:03.035207 kernel: Loading compiled-in X.509 certificates Oct 2 20:30:03.035215 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 20:30:03.035224 kernel: Key type .fscrypt registered Oct 2 20:30:03.035233 kernel: Key type fscrypt-provisioning registered Oct 2 20:30:03.035242 kernel: pstore: Using crash dump compression: deflate Oct 2 20:30:03.035260 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 20:30:03.035271 kernel: ima: Allocated hash algorithm: sha1 Oct 2 20:30:03.035279 kernel: ima: No architecture policies found Oct 2 20:30:03.035290 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 20:30:03.035297 kernel: Write protecting the kernel read-only data: 28672k Oct 2 20:30:03.035310 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 20:30:03.035318 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 20:30:03.035329 kernel: Run /init as init process Oct 2 20:30:03.035337 kernel: with arguments: Oct 2 20:30:03.035346 kernel: /init Oct 2 20:30:03.035358 kernel: with environment: Oct 2 20:30:03.035368 kernel: HOME=/ Oct 2 20:30:03.035375 kernel: TERM=linux Oct 2 20:30:03.035383 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 20:30:03.035393 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:30:03.035404 systemd[1]: Detected virtualization microsoft. Oct 2 20:30:03.035414 systemd[1]: Detected architecture x86-64. Oct 2 20:30:03.035428 systemd[1]: Running in initrd. Oct 2 20:30:03.035436 systemd[1]: No hostname configured, using default hostname. Oct 2 20:30:03.035444 systemd[1]: Hostname set to . Oct 2 20:30:03.035455 systemd[1]: Initializing machine ID from random generator. Oct 2 20:30:03.035464 systemd[1]: Queued start job for default target initrd.target. Oct 2 20:30:03.035475 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:30:03.035482 systemd[1]: Reached target cryptsetup.target. Oct 2 20:30:03.035493 systemd[1]: Reached target paths.target. Oct 2 20:30:03.035501 systemd[1]: Reached target slices.target. Oct 2 20:30:03.035514 systemd[1]: Reached target swap.target. Oct 2 20:30:03.035522 systemd[1]: Reached target timers.target. Oct 2 20:30:03.035532 systemd[1]: Listening on iscsid.socket. Oct 2 20:30:03.035541 systemd[1]: Listening on iscsiuio.socket. Oct 2 20:30:03.035552 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 20:30:03.035560 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 20:30:03.035569 systemd[1]: Listening on systemd-journald.socket. Oct 2 20:30:03.035582 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:30:03.035593 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:30:03.035601 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:30:03.035610 systemd[1]: Reached target sockets.target. Oct 2 20:30:03.035620 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:30:03.035630 systemd[1]: Finished network-cleanup.service. Oct 2 20:30:03.035639 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 20:30:03.035647 systemd[1]: Starting systemd-journald.service... Oct 2 20:30:03.035658 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:30:03.035670 systemd[1]: Starting systemd-resolved.service... Oct 2 20:30:03.035680 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 20:30:03.035688 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:30:03.035699 kernel: audit: type=1130 audit(1696278603.033:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.035712 systemd-journald[183]: Journal started Oct 2 20:30:03.035764 systemd-journald[183]: Runtime Journal (/run/log/journal/329b2bbbc96a4c24ae234359ac24b1f5) is 8.0M, max 159.0M, 151.0M free. Oct 2 20:30:03.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.052274 systemd[1]: Started systemd-journald.service. Oct 2 20:30:03.049347 systemd-modules-load[184]: Inserted module 'overlay' Oct 2 20:30:03.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.066839 systemd-resolved[185]: Positive Trust Anchors: Oct 2 20:30:03.080464 kernel: audit: type=1130 audit(1696278603.064:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.067113 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 20:30:03.067131 systemd-resolved[185]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:30:03.067168 systemd-resolved[185]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:30:03.108560 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 20:30:03.069819 systemd-resolved[185]: Defaulting to hostname 'linux'. Oct 2 20:30:03.115014 kernel: Bridge firewalling registered Oct 2 20:30:03.115034 systemd-modules-load[184]: Inserted module 'br_netfilter' Oct 2 20:30:03.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.118051 systemd[1]: Started systemd-resolved.service. Oct 2 20:30:03.132691 kernel: audit: type=1130 audit(1696278603.117:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.135323 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 20:30:03.167207 kernel: audit: type=1130 audit(1696278603.134:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.167232 kernel: SCSI subsystem initialized Oct 2 20:30:03.167245 kernel: audit: type=1130 audit(1696278603.151:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.151000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.151450 systemd[1]: Reached target nss-lookup.target. Oct 2 20:30:03.164265 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 20:30:03.168198 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:30:03.190342 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 20:30:03.190387 kernel: device-mapper: uevent: version 1.0.3 Oct 2 20:30:03.198750 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:30:03.200379 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 20:30:03.199000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.212263 kernel: audit: type=1130 audit(1696278603.199:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.217404 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 20:30:03.220695 systemd[1]: Starting dracut-cmdline.service... Oct 2 20:30:03.238321 kernel: audit: type=1130 audit(1696278603.219:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.238436 dracut-cmdline[201]: dracut-dracut-053 Oct 2 20:30:03.238436 dracut-cmdline[201]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:30:03.279215 kernel: audit: type=1130 audit(1696278603.242:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.238585 systemd-modules-load[184]: Inserted module 'dm_multipath' Oct 2 20:30:03.239241 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:30:03.244144 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:30:03.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.289028 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:30:03.306314 kernel: audit: type=1130 audit(1696278603.291:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.306343 kernel: Loading iSCSI transport class v2.0-870. Oct 2 20:30:03.323276 kernel: iscsi: registered transport (tcp) Oct 2 20:30:03.347780 kernel: iscsi: registered transport (qla4xxx) Oct 2 20:30:03.347849 kernel: QLogic iSCSI HBA Driver Oct 2 20:30:03.376607 systemd[1]: Finished dracut-cmdline.service. Oct 2 20:30:03.381000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.382332 systemd[1]: Starting dracut-pre-udev.service... Oct 2 20:30:03.432280 kernel: raid6: avx512x4 gen() 18833 MB/s Oct 2 20:30:03.452273 kernel: raid6: avx512x4 xor() 8387 MB/s Oct 2 20:30:03.472267 kernel: raid6: avx512x2 gen() 18940 MB/s Oct 2 20:30:03.493278 kernel: raid6: avx512x2 xor() 29854 MB/s Oct 2 20:30:03.513269 kernel: raid6: avx512x1 gen() 18938 MB/s Oct 2 20:30:03.533270 kernel: raid6: avx512x1 xor() 27100 MB/s Oct 2 20:30:03.553270 kernel: raid6: avx2x4 gen() 18830 MB/s Oct 2 20:30:03.573268 kernel: raid6: avx2x4 xor() 7991 MB/s Oct 2 20:30:03.593266 kernel: raid6: avx2x2 gen() 18741 MB/s Oct 2 20:30:03.618268 kernel: raid6: avx2x2 xor() 21991 MB/s Oct 2 20:30:03.638265 kernel: raid6: avx2x1 gen() 14258 MB/s Oct 2 20:30:03.658264 kernel: raid6: avx2x1 xor() 19148 MB/s Oct 2 20:30:03.678266 kernel: raid6: sse2x4 gen() 11538 MB/s Oct 2 20:30:03.698264 kernel: raid6: sse2x4 xor() 7163 MB/s Oct 2 20:30:03.718264 kernel: raid6: sse2x2 gen() 12588 MB/s Oct 2 20:30:03.738266 kernel: raid6: sse2x2 xor() 7522 MB/s Oct 2 20:30:03.758264 kernel: raid6: sse2x1 gen() 11478 MB/s Oct 2 20:30:03.782226 kernel: raid6: sse2x1 xor() 5898 MB/s Oct 2 20:30:03.782243 kernel: raid6: using algorithm avx512x2 gen() 18940 MB/s Oct 2 20:30:03.782273 kernel: raid6: .... xor() 29854 MB/s, rmw enabled Oct 2 20:30:03.785906 kernel: raid6: using avx512x2 recovery algorithm Oct 2 20:30:03.805279 kernel: xor: automatically using best checksumming function avx Oct 2 20:30:03.901281 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 20:30:03.908814 systemd[1]: Finished dracut-pre-udev.service. Oct 2 20:30:03.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.913000 audit: BPF prog-id=7 op=LOAD Oct 2 20:30:03.913000 audit: BPF prog-id=8 op=LOAD Oct 2 20:30:03.913930 systemd[1]: Starting systemd-udevd.service... Oct 2 20:30:03.928106 systemd-udevd[382]: Using default interface naming scheme 'v252'. Oct 2 20:30:03.932809 systemd[1]: Started systemd-udevd.service. Oct 2 20:30:03.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.935917 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 20:30:03.954053 dracut-pre-trigger[386]: rd.md=0: removing MD RAID activation Oct 2 20:30:03.981608 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 20:30:03.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.984411 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:30:04.022000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:04.019344 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:30:04.076283 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 20:30:04.104829 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 20:30:04.104888 kernel: AES CTR mode by8 optimization enabled Oct 2 20:30:04.112805 kernel: hv_vmbus: Vmbus version:5.2 Oct 2 20:30:04.133277 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 20:30:04.141461 kernel: scsi host0: storvsc_host_t Oct 2 20:30:04.141540 kernel: scsi host1: storvsc_host_t Oct 2 20:30:04.149113 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 20:30:04.154329 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 20:30:04.154372 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 20:30:04.160751 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 20:30:04.160791 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 20:30:04.174863 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 20:30:04.183272 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 20:30:04.195601 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 20:30:04.195659 kernel: hid 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 20:30:04.217837 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 20:30:04.218198 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 20:30:04.226602 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 20:30:04.226860 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 20:30:04.227046 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 20:30:04.232293 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:30:04.237511 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 20:30:04.244501 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 20:30:04.244719 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 20:30:04.246274 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 20:30:04.377969 kernel: hv_netvsc 000d3ab4-fc45-000d-3ab4-fc45000d3ab4 eth0: VF slot 1 added Oct 2 20:30:04.393571 kernel: hv_vmbus: registering driver hv_pci Oct 2 20:30:04.393627 kernel: hv_pci 1e882c95-f36f-491d-aaec-28bce17b93b1: PCI VMBus probing: Using version 0x10004 Oct 2 20:30:04.405979 kernel: hv_pci 1e882c95-f36f-491d-aaec-28bce17b93b1: PCI host bridge to bus f36f:00 Oct 2 20:30:04.406165 kernel: pci_bus f36f:00: root bus resource [mem 0xfe0000000-0xfe00fffff window] Oct 2 20:30:04.406318 kernel: pci_bus f36f:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 20:30:04.416529 kernel: pci f36f:00:02.0: [15b3:1016] type 00 class 0x020000 Oct 2 20:30:04.426225 kernel: pci f36f:00:02.0: reg 0x10: [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 20:30:04.445560 kernel: pci f36f:00:02.0: enabling Extended Tags Oct 2 20:30:04.460288 kernel: pci f36f:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at f36f:00:02.0 (capable of 63.008 Gb/s with 8.0 GT/s PCIe x8 link) Oct 2 20:30:04.460531 kernel: pci_bus f36f:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 20:30:04.469173 kernel: pci f36f:00:02.0: BAR 0: assigned [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 20:30:04.568281 kernel: mlx5_core f36f:00:02.0: firmware version: 14.30.1224 Oct 2 20:30:04.613469 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 20:30:04.661275 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (436) Oct 2 20:30:04.681492 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:30:04.736556 kernel: mlx5_core f36f:00:02.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Oct 2 20:30:04.761429 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 20:30:04.794086 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 20:30:04.797235 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 20:30:04.808531 systemd[1]: Starting disk-uuid.service... Oct 2 20:30:04.825286 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:30:04.834272 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:30:04.841275 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:30:04.903999 kernel: mlx5_core f36f:00:02.0: Supported tc offload range - chains: 1, prios: 1 Oct 2 20:30:04.904199 kernel: mlx5_core f36f:00:02.0: mlx5e_tc_post_act_init:40:(pid 188): firmware level support is missing Oct 2 20:30:04.918276 kernel: hv_netvsc 000d3ab4-fc45-000d-3ab4-fc45000d3ab4 eth0: VF registering: eth1 Oct 2 20:30:04.924281 kernel: mlx5_core f36f:00:02.0 eth1: joined to eth0 Oct 2 20:30:04.942280 kernel: mlx5_core f36f:00:02.0 enP62319s1: renamed from eth1 Oct 2 20:30:05.845745 disk-uuid[544]: The operation has completed successfully. Oct 2 20:30:05.848514 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:30:05.934800 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 20:30:05.939000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:05.939000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:05.934906 systemd[1]: Finished disk-uuid.service. Oct 2 20:30:05.942132 systemd[1]: Starting verity-setup.service... Oct 2 20:30:05.973282 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 20:30:06.217423 systemd[1]: Found device dev-mapper-usr.device. Oct 2 20:30:06.223463 systemd[1]: Finished verity-setup.service. Oct 2 20:30:06.227000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:06.228366 systemd[1]: Mounting sysusr-usr.mount... Oct 2 20:30:06.306295 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 20:30:06.306157 systemd[1]: Mounted sysusr-usr.mount. Oct 2 20:30:06.310645 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 20:30:06.314976 systemd[1]: Starting ignition-setup.service... Oct 2 20:30:06.320315 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 20:30:06.337977 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:30:06.338040 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:30:06.338051 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:30:06.392703 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 20:30:06.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:06.399000 audit: BPF prog-id=9 op=LOAD Oct 2 20:30:06.400038 systemd[1]: Starting systemd-networkd.service... Oct 2 20:30:06.402731 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 20:30:06.434641 systemd-networkd[816]: lo: Link UP Oct 2 20:30:06.434651 systemd-networkd[816]: lo: Gained carrier Oct 2 20:30:06.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:06.438614 systemd-networkd[816]: Enumeration completed Oct 2 20:30:06.439105 systemd[1]: Started systemd-networkd.service. Oct 2 20:30:06.439690 systemd-networkd[816]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:30:06.441598 systemd[1]: Reached target network.target. Oct 2 20:30:06.453120 systemd[1]: Starting iscsiuio.service... Oct 2 20:30:06.461634 systemd[1]: Started iscsiuio.service. Oct 2 20:30:06.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:06.463960 systemd[1]: Starting iscsid.service... Oct 2 20:30:06.469890 iscsid[821]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:30:06.469890 iscsid[821]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 20:30:06.469890 iscsid[821]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 20:30:06.469890 iscsid[821]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 20:30:06.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:06.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:06.471473 systemd[1]: Started iscsid.service. Oct 2 20:30:06.507629 iscsid[821]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:30:06.507629 iscsid[821]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 20:30:06.519151 kernel: mlx5_core f36f:00:02.0 enP62319s1: Link up Oct 2 20:30:06.476123 systemd[1]: Starting dracut-initqueue.service... Oct 2 20:30:06.490331 systemd[1]: Finished dracut-initqueue.service. Oct 2 20:30:06.495034 systemd[1]: Reached target remote-fs-pre.target. Oct 2 20:30:06.499898 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:30:06.502076 systemd[1]: Reached target remote-fs.target. Oct 2 20:30:06.504923 systemd[1]: Starting dracut-pre-mount.service... Oct 2 20:30:06.526306 systemd[1]: Finished ignition-setup.service. Oct 2 20:30:06.542000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:06.545017 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 20:30:06.549906 systemd[1]: Finished dracut-pre-mount.service. Oct 2 20:30:06.553000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:06.589280 kernel: hv_netvsc 000d3ab4-fc45-000d-3ab4-fc45000d3ab4 eth0: Data path switched to VF: enP62319s1 Oct 2 20:30:06.594741 systemd-networkd[816]: enP62319s1: Link UP Oct 2 20:30:06.596726 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 20:30:06.596848 systemd-networkd[816]: eth0: Link UP Oct 2 20:30:06.597052 systemd-networkd[816]: eth0: Gained carrier Oct 2 20:30:06.601460 systemd-networkd[816]: enP62319s1: Gained carrier Oct 2 20:30:06.627372 systemd-networkd[816]: eth0: DHCPv4 address 10.200.8.16/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 20:30:07.851491 systemd-networkd[816]: eth0: Gained IPv6LL Oct 2 20:30:09.203003 ignition[837]: Ignition 2.14.0 Oct 2 20:30:09.203021 ignition[837]: Stage: fetch-offline Oct 2 20:30:09.203112 ignition[837]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:30:09.203162 ignition[837]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:30:09.306008 ignition[837]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:30:09.306202 ignition[837]: parsed url from cmdline: "" Oct 2 20:30:09.306206 ignition[837]: no config URL provided Oct 2 20:30:09.306211 ignition[837]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:30:09.306220 ignition[837]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:30:09.306226 ignition[837]: failed to fetch config: resource requires networking Oct 2 20:30:09.306357 ignition[837]: Ignition finished successfully Oct 2 20:30:09.321010 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 20:30:09.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:09.324360 systemd[1]: Starting ignition-fetch.service... Oct 2 20:30:09.345689 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 20:30:09.345721 kernel: audit: type=1130 audit(1696278609.323:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:09.351802 ignition[843]: Ignition 2.14.0 Oct 2 20:30:09.351812 ignition[843]: Stage: fetch Oct 2 20:30:09.351943 ignition[843]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:30:09.351976 ignition[843]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:30:09.362348 ignition[843]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:30:09.362493 ignition[843]: parsed url from cmdline: "" Oct 2 20:30:09.362497 ignition[843]: no config URL provided Oct 2 20:30:09.362502 ignition[843]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:30:09.362510 ignition[843]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:30:09.362550 ignition[843]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 20:30:09.393096 ignition[843]: GET result: OK Oct 2 20:30:09.393131 ignition[843]: failed to retrieve userdata from IMDS, falling back to custom data: not a config (empty) Oct 2 20:30:09.480186 ignition[843]: opening config device: "/dev/sr0" Oct 2 20:30:09.480749 ignition[843]: getting drive status for "/dev/sr0" Oct 2 20:30:09.480809 ignition[843]: drive status: OK Oct 2 20:30:09.480867 ignition[843]: mounting config device Oct 2 20:30:09.480884 ignition[843]: op(1): [started] mounting "/dev/sr0" at "/tmp/ignition-azure1197502340" Oct 2 20:30:09.505017 ignition[843]: op(1): [finished] mounting "/dev/sr0" at "/tmp/ignition-azure1197502340" Oct 2 20:30:09.508582 kernel: UDF-fs: INFO Mounting volume 'UDF Volume', timestamp 2023/10/03 00:00 (1000) Oct 2 20:30:09.505996 ignition[843]: checking for config drive Oct 2 20:30:09.507140 systemd[1]: tmp-ignition\x2dazure1197502340.mount: Deactivated successfully. Oct 2 20:30:09.506320 ignition[843]: reading config Oct 2 20:30:09.506792 ignition[843]: op(2): [started] unmounting "/dev/sr0" at "/tmp/ignition-azure1197502340" Oct 2 20:30:09.508373 ignition[843]: op(2): [finished] unmounting "/dev/sr0" at "/tmp/ignition-azure1197502340" Oct 2 20:30:09.508388 ignition[843]: config has been read from custom data Oct 2 20:30:09.508490 ignition[843]: parsing config with SHA512: 1611b42434b9cc0bcfa539851f05a6eaba61852329c5c9589a72ddeb500234ea4c6c45b5e4f1b1d12ecb81afdb491ddb90da941fdde116ce034a72ca9f4f8991 Oct 2 20:30:09.538767 unknown[843]: fetched base config from "system" Oct 2 20:30:09.538780 unknown[843]: fetched base config from "system" Oct 2 20:30:09.539298 ignition[843]: fetch: fetch complete Oct 2 20:30:09.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:09.538787 unknown[843]: fetched user config from "azure" Oct 2 20:30:09.561086 kernel: audit: type=1130 audit(1696278609.545:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:09.539303 ignition[843]: fetch: fetch passed Oct 2 20:30:09.543664 systemd[1]: Finished ignition-fetch.service. Oct 2 20:30:09.539338 ignition[843]: Ignition finished successfully Oct 2 20:30:09.558633 systemd[1]: Starting ignition-kargs.service... Oct 2 20:30:09.575829 ignition[850]: Ignition 2.14.0 Oct 2 20:30:09.575840 ignition[850]: Stage: kargs Oct 2 20:30:09.575977 ignition[850]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:30:09.576014 ignition[850]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:30:09.580503 ignition[850]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:30:09.582571 ignition[850]: kargs: kargs passed Oct 2 20:30:09.587000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:09.585680 systemd[1]: Finished ignition-kargs.service. Oct 2 20:30:09.625583 kernel: audit: type=1130 audit(1696278609.587:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:09.582622 ignition[850]: Ignition finished successfully Oct 2 20:30:09.588672 systemd[1]: Starting ignition-disks.service... Oct 2 20:30:09.634116 ignition[856]: Ignition 2.14.0 Oct 2 20:30:09.634126 ignition[856]: Stage: disks Oct 2 20:30:09.634276 ignition[856]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:30:09.634309 ignition[856]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:30:09.645099 ignition[856]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:30:09.646277 ignition[856]: disks: disks passed Oct 2 20:30:09.646328 ignition[856]: Ignition finished successfully Oct 2 20:30:09.650996 systemd[1]: Finished ignition-disks.service. Oct 2 20:30:09.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:09.654704 systemd[1]: Reached target initrd-root-device.target. Oct 2 20:30:09.673345 kernel: audit: type=1130 audit(1696278609.654:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:09.669007 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:30:09.673309 systemd[1]: Reached target local-fs.target. Oct 2 20:30:09.675509 systemd[1]: Reached target sysinit.target. Oct 2 20:30:09.677743 systemd[1]: Reached target basic.target. Oct 2 20:30:09.683560 systemd[1]: Starting systemd-fsck-root.service... Oct 2 20:30:09.745986 systemd-fsck[864]: ROOT: clean, 603/7326000 files, 481068/7359488 blocks Oct 2 20:30:09.752232 systemd[1]: Finished systemd-fsck-root.service. Oct 2 20:30:09.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:09.767594 systemd[1]: Mounting sysroot.mount... Oct 2 20:30:09.776087 kernel: audit: type=1130 audit(1696278609.754:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:09.786272 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 20:30:09.786343 systemd[1]: Mounted sysroot.mount. Oct 2 20:30:09.788050 systemd[1]: Reached target initrd-root-fs.target. Oct 2 20:30:09.813463 systemd[1]: Mounting sysroot-usr.mount... Oct 2 20:30:09.817867 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 20:30:09.824435 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 20:30:09.824470 systemd[1]: Reached target ignition-diskful.target. Oct 2 20:30:09.830037 systemd[1]: Mounted sysroot-usr.mount. Oct 2 20:30:09.862604 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:30:09.871182 systemd[1]: Starting initrd-setup-root.service... Oct 2 20:30:09.879231 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (874) Oct 2 20:30:09.888073 initrd-setup-root[879]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 20:30:09.900197 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:30:09.900219 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:30:09.900235 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:30:09.900415 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:30:09.906004 initrd-setup-root[905]: cut: /sysroot/etc/group: No such file or directory Oct 2 20:30:09.921146 initrd-setup-root[913]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 20:30:09.927980 initrd-setup-root[921]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 20:30:10.265972 systemd[1]: Finished initrd-setup-root.service. Oct 2 20:30:10.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:10.286486 kernel: audit: type=1130 audit(1696278610.267:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:10.281880 systemd[1]: Starting ignition-mount.service... Oct 2 20:30:10.284902 systemd[1]: Starting sysroot-boot.service... Oct 2 20:30:10.312650 ignition[940]: INFO : Ignition 2.14.0 Oct 2 20:30:10.314820 ignition[940]: INFO : Stage: mount Oct 2 20:30:10.314820 ignition[940]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:30:10.314820 ignition[940]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:30:10.328854 ignition[940]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:30:10.328854 ignition[940]: INFO : mount: mount passed Oct 2 20:30:10.328854 ignition[940]: INFO : Ignition finished successfully Oct 2 20:30:10.323329 systemd[1]: Finished ignition-mount.service. Oct 2 20:30:10.354284 kernel: audit: type=1130 audit(1696278610.339:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:10.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:10.356163 systemd[1]: Finished sysroot-boot.service. Oct 2 20:30:10.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:10.371284 kernel: audit: type=1130 audit(1696278610.358:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:10.506486 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 20:30:10.506600 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 20:30:11.073343 coreos-metadata[873]: Oct 02 20:30:11.073 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 20:30:11.088097 coreos-metadata[873]: Oct 02 20:30:11.088 INFO Fetch successful Oct 2 20:30:11.123227 coreos-metadata[873]: Oct 02 20:30:11.123 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 20:30:11.135017 coreos-metadata[873]: Oct 02 20:30:11.134 INFO Fetch successful Oct 2 20:30:11.152815 coreos-metadata[873]: Oct 02 20:30:11.152 INFO wrote hostname ci-3510.3.0-a-2276519d4a to /sysroot/etc/hostname Oct 2 20:30:11.154770 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 20:30:11.160819 systemd[1]: Starting ignition-files.service... Oct 2 20:30:11.182705 kernel: audit: type=1130 audit(1696278611.159:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:11.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:11.179849 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:30:11.192273 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (953) Oct 2 20:30:11.192308 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:30:11.200630 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:30:11.200655 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:30:11.208645 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:30:11.221347 ignition[972]: INFO : Ignition 2.14.0 Oct 2 20:30:11.221347 ignition[972]: INFO : Stage: files Oct 2 20:30:11.225232 ignition[972]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:30:11.225232 ignition[972]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:30:11.238389 ignition[972]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:30:11.251802 ignition[972]: DEBUG : files: compiled without relabeling support, skipping Oct 2 20:30:11.255622 ignition[972]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 20:30:11.255622 ignition[972]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 20:30:11.281475 ignition[972]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 20:30:11.286886 ignition[972]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 20:30:11.293073 unknown[972]: wrote ssh authorized keys file for user: core Oct 2 20:30:11.298358 ignition[972]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 20:30:11.298358 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 20:30:11.298358 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 20:30:11.824616 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 20:30:12.916371 ignition[972]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 20:30:12.924685 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 20:30:12.924685 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 20:30:12.924685 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 20:30:13.277306 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 20:30:14.094207 ignition[972]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 20:30:14.102445 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 20:30:14.102445 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:30:14.102445 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubeadm: attempt #1 Oct 2 20:30:14.236756 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 20:30:15.645214 ignition[972]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: f4daad200c8378dfdc6cb69af28eaca4215f2b4a2dbdf75f29f9210171cb5683bc873fc000319022e6b3ad61175475d77190734713ba9136644394e8a8faafa1 Oct 2 20:30:15.653451 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:30:15.653451 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:30:15.653451 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubelet: attempt #1 Oct 2 20:30:15.793396 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 20:30:19.390692 ignition[972]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: ce6ba764274162d38ac1c44e1fb1f0f835346f3afc5b508bb755b1b7d7170910f5812b0a1941b32e29d950e905bbd08ae761c87befad921db4d44969c8562e75 Oct 2 20:30:19.398246 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:30:19.398246 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:30:19.398246 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubectl: attempt #1 Oct 2 20:30:19.517321 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 20:30:21.476610 ignition[972]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 33cf3f6e37bcee4dff7ce14ab933c605d07353d4e31446dd2b52c3f05e0b150b60e531f6069f112d8a76331322a72b593537531e62104cfc7c70cb03d46f76b3 Oct 2 20:30:21.484714 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:30:21.484714 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:30:21.484714 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:30:21.484714 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:30:21.484714 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 20:30:21.846957 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 20:30:22.435384 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:30:22.440838 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 20:30:22.440838 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 20:30:22.440838 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:30:22.440838 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:30:22.440838 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 20:30:22.440838 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:30:22.479038 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (977) Oct 2 20:30:22.470160 systemd[1]: mnt-oem3728738888.mount: Deactivated successfully. Oct 2 20:30:22.481881 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3728738888" Oct 2 20:30:22.481881 ignition[972]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3728738888": device or resource busy Oct 2 20:30:22.481881 ignition[972]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3728738888", trying btrfs: device or resource busy Oct 2 20:30:22.481881 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3728738888" Oct 2 20:30:22.481881 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3728738888" Oct 2 20:30:22.481881 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem3728738888" Oct 2 20:30:22.481881 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem3728738888" Oct 2 20:30:22.481881 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 20:30:22.481881 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:30:22.481881 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:30:22.481881 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2695447620" Oct 2 20:30:22.481881 ignition[972]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2695447620": device or resource busy Oct 2 20:30:22.481881 ignition[972]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2695447620", trying btrfs: device or resource busy Oct 2 20:30:22.481881 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2695447620" Oct 2 20:30:22.642226 kernel: audit: type=1130 audit(1696278622.501:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.642274 kernel: audit: type=1130 audit(1696278622.529:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.642294 kernel: audit: type=1131 audit(1696278622.529:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.642320 kernel: audit: type=1130 audit(1696278622.565:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.642339 kernel: audit: type=1130 audit(1696278622.611:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.642357 kernel: audit: type=1131 audit(1696278622.612:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.529000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.642620 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2695447620" Oct 2 20:30:22.642620 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem2695447620" Oct 2 20:30:22.642620 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem2695447620" Oct 2 20:30:22.642620 ignition[972]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:30:22.642620 ignition[972]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 20:30:22.642620 ignition[972]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 20:30:22.642620 ignition[972]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 20:30:22.642620 ignition[972]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 20:30:22.642620 ignition[972]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 20:30:22.642620 ignition[972]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:30:22.642620 ignition[972]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:30:22.642620 ignition[972]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 20:30:22.642620 ignition[972]: INFO : files: op(18): [started] processing unit "prepare-critools.service" Oct 2 20:30:22.642620 ignition[972]: INFO : files: op(18): op(19): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:30:22.642620 ignition[972]: INFO : files: op(18): op(19): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:30:22.642620 ignition[972]: INFO : files: op(18): [finished] processing unit "prepare-critools.service" Oct 2 20:30:22.642620 ignition[972]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-critools.service" Oct 2 20:30:22.642620 ignition[972]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 20:30:22.642620 ignition[972]: INFO : files: op(1b): [started] setting preset to enabled for "waagent.service" Oct 2 20:30:22.642620 ignition[972]: INFO : files: op(1b): [finished] setting preset to enabled for "waagent.service" Oct 2 20:30:22.485875 systemd[1]: mnt-oem2695447620.mount: Deactivated successfully. Oct 2 20:30:22.663536 ignition[972]: INFO : files: op(1c): [started] setting preset to enabled for "nvidia.service" Oct 2 20:30:22.663536 ignition[972]: INFO : files: op(1c): [finished] setting preset to enabled for "nvidia.service" Oct 2 20:30:22.663536 ignition[972]: INFO : files: op(1d): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:30:22.663536 ignition[972]: INFO : files: op(1d): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:30:22.663536 ignition[972]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:30:22.663536 ignition[972]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:30:22.663536 ignition[972]: INFO : files: files passed Oct 2 20:30:22.663536 ignition[972]: INFO : Ignition finished successfully Oct 2 20:30:22.492944 systemd[1]: Finished ignition-files.service. Oct 2 20:30:22.762215 initrd-setup-root-after-ignition[997]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 20:30:22.516685 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 20:30:22.519260 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 20:30:22.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.520203 systemd[1]: Starting ignition-quench.service... Oct 2 20:30:22.791351 kernel: audit: type=1130 audit(1696278622.773:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.523487 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 20:30:22.523567 systemd[1]: Finished ignition-quench.service. Oct 2 20:30:22.560508 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 20:30:22.565815 systemd[1]: Reached target ignition-complete.target. Oct 2 20:30:22.586492 systemd[1]: Starting initrd-parse-etc.service... Oct 2 20:30:22.606811 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 20:30:22.606910 systemd[1]: Finished initrd-parse-etc.service. Oct 2 20:30:22.612391 systemd[1]: Reached target initrd-fs.target. Oct 2 20:30:22.635827 systemd[1]: Reached target initrd.target. Oct 2 20:30:22.642261 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 20:30:22.643304 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 20:30:22.772806 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 20:30:22.786795 systemd[1]: Starting initrd-cleanup.service... Oct 2 20:30:22.829037 systemd[1]: Stopped target nss-lookup.target. Oct 2 20:30:22.832848 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 20:30:22.834905 systemd[1]: Stopped target timers.target. Oct 2 20:30:22.838522 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 20:30:22.842000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.838663 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 20:30:22.859070 kernel: audit: type=1131 audit(1696278622.842:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.855397 systemd[1]: Stopped target initrd.target. Oct 2 20:30:22.859161 systemd[1]: Stopped target basic.target. Oct 2 20:30:22.862936 systemd[1]: Stopped target ignition-complete.target. Oct 2 20:30:22.867111 systemd[1]: Stopped target ignition-diskful.target. Oct 2 20:30:22.871687 systemd[1]: Stopped target initrd-root-device.target. Oct 2 20:30:22.876340 systemd[1]: Stopped target remote-fs.target. Oct 2 20:30:22.880726 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 20:30:22.884669 systemd[1]: Stopped target sysinit.target. Oct 2 20:30:22.888781 systemd[1]: Stopped target local-fs.target. Oct 2 20:30:22.892720 systemd[1]: Stopped target local-fs-pre.target. Oct 2 20:30:22.896826 systemd[1]: Stopped target swap.target. Oct 2 20:30:22.900669 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 20:30:22.904000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.900820 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 20:30:22.922002 kernel: audit: type=1131 audit(1696278622.904:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.917447 systemd[1]: Stopped target cryptsetup.target. Oct 2 20:30:22.921981 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 20:30:22.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.922161 systemd[1]: Stopped dracut-initqueue.service. Oct 2 20:30:22.944861 kernel: audit: type=1131 audit(1696278622.925:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.940000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.926278 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 20:30:22.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.926417 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 20:30:22.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:22.941109 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 20:30:22.941241 systemd[1]: Stopped ignition-files.service. Oct 2 20:30:22.944966 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 20:30:22.945082 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 20:30:22.960711 systemd[1]: Stopping ignition-mount.service... Oct 2 20:30:22.975451 iscsid[821]: iscsid shutting down. Oct 2 20:30:22.976292 systemd[1]: Stopping iscsid.service... Oct 2 20:30:22.982218 systemd[1]: Stopping sysroot-boot.service... Oct 2 20:30:22.991542 ignition[1010]: INFO : Ignition 2.14.0 Oct 2 20:30:22.991542 ignition[1010]: INFO : Stage: umount Oct 2 20:30:22.995176 ignition[1010]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:30:22.995176 ignition[1010]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:30:22.991854 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 20:30:22.992057 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 20:30:23.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.011382 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 20:30:23.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.020000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.011541 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 20:30:23.026045 ignition[1010]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:30:23.026045 ignition[1010]: INFO : umount: umount passed Oct 2 20:30:23.015679 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 20:30:23.034000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.038978 ignition[1010]: INFO : Ignition finished successfully Oct 2 20:30:23.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.015810 systemd[1]: Stopped iscsid.service. Oct 2 20:30:23.045000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.047000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.051000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.024231 systemd[1]: Stopping iscsiuio.service... Oct 2 20:30:23.056000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.030961 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 20:30:23.031054 systemd[1]: Stopped iscsiuio.service. Oct 2 20:30:23.034772 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 20:30:23.034854 systemd[1]: Finished initrd-cleanup.service. Oct 2 20:30:23.040699 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 20:30:23.041165 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 20:30:23.041243 systemd[1]: Stopped ignition-mount.service. Oct 2 20:30:23.044604 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 20:30:23.044650 systemd[1]: Stopped ignition-disks.service. Oct 2 20:30:23.047903 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 20:30:23.047943 systemd[1]: Stopped ignition-kargs.service. Oct 2 20:30:23.049977 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 20:30:23.050010 systemd[1]: Stopped ignition-fetch.service. Oct 2 20:30:23.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.052045 systemd[1]: Stopped target network.target. Oct 2 20:30:23.054029 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 20:30:23.054080 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 20:30:23.056795 systemd[1]: Stopped target paths.target. Oct 2 20:30:23.130000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.064431 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 20:30:23.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.074305 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 20:30:23.102777 systemd[1]: Stopped target slices.target. Oct 2 20:30:23.139000 audit: BPF prog-id=6 op=UNLOAD Oct 2 20:30:23.104682 systemd[1]: Stopped target sockets.target. Oct 2 20:30:23.106685 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 20:30:23.106735 systemd[1]: Closed iscsid.socket. Oct 2 20:30:23.151000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.154000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.108452 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 20:30:23.157000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.108493 systemd[1]: Closed iscsiuio.socket. Oct 2 20:30:23.108597 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 20:30:23.108645 systemd[1]: Stopped ignition-setup.service. Oct 2 20:30:23.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.109540 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:30:23.109678 systemd[1]: Stopping systemd-resolved.service... Oct 2 20:30:23.110264 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 20:30:23.183000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.110353 systemd[1]: Stopped sysroot-boot.service. Oct 2 20:30:23.187000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.110602 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 20:30:23.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.110638 systemd[1]: Stopped initrd-setup-root.service. Oct 2 20:30:23.123318 systemd-networkd[816]: eth0: DHCPv6 lease lost Oct 2 20:30:23.196000 audit: BPF prog-id=9 op=UNLOAD Oct 2 20:30:23.126703 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 20:30:23.203000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.126806 systemd[1]: Stopped systemd-resolved.service. Oct 2 20:30:23.132940 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:30:23.133041 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:30:23.139938 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 20:30:23.139974 systemd[1]: Closed systemd-networkd.socket. Oct 2 20:30:23.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.215000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.144331 systemd[1]: Stopping network-cleanup.service... Oct 2 20:30:23.146954 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 20:30:23.147014 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 20:30:23.151376 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 20:30:23.151420 systemd[1]: Stopped systemd-sysctl.service. Oct 2 20:30:23.154874 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 20:30:23.242567 kernel: hv_netvsc 000d3ab4-fc45-000d-3ab4-fc45000d3ab4 eth0: Data path switched from VF: enP62319s1 Oct 2 20:30:23.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.154920 systemd[1]: Stopped systemd-modules-load.service. Oct 2 20:30:23.157280 systemd[1]: Stopping systemd-udevd.service... Oct 2 20:30:23.164174 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 20:30:23.164333 systemd[1]: Stopped systemd-udevd.service. Oct 2 20:30:23.170272 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 20:30:23.170317 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 20:30:23.174500 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 20:30:23.174538 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 20:30:23.178570 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 20:30:23.178621 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 20:30:23.183492 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 20:30:23.183541 systemd[1]: Stopped dracut-cmdline.service. Oct 2 20:30:23.187512 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 20:30:23.187559 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 20:30:23.193083 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 20:30:23.197340 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 20:30:23.197400 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 20:30:23.206149 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 20:30:23.206208 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 20:30:23.210147 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 20:30:23.212184 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 20:30:23.231077 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 20:30:23.231177 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 20:30:23.297760 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 20:30:23.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:23.297850 systemd[1]: Stopped network-cleanup.service. Oct 2 20:30:23.300443 systemd[1]: Reached target initrd-switch-root.target. Oct 2 20:30:23.305804 systemd[1]: Starting initrd-switch-root.service... Oct 2 20:30:23.318783 systemd[1]: Switching root. Oct 2 20:30:23.334132 systemd-journald[183]: Journal stopped Oct 2 20:30:37.030913 systemd-journald[183]: Received SIGTERM from PID 1 (systemd). Oct 2 20:30:37.030951 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 20:30:37.030965 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 20:30:37.030974 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 20:30:37.030985 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 20:30:37.030993 kernel: SELinux: policy capability open_perms=1 Oct 2 20:30:37.031007 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 20:30:37.031015 kernel: SELinux: policy capability always_check_network=0 Oct 2 20:30:37.031026 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 20:30:37.031035 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 20:30:37.031045 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 20:30:37.031053 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 20:30:37.031064 systemd[1]: Successfully loaded SELinux policy in 278.781ms. Oct 2 20:30:37.031076 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 22.163ms. Oct 2 20:30:37.031092 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:30:37.031104 systemd[1]: Detected virtualization microsoft. Oct 2 20:30:37.031113 systemd[1]: Detected architecture x86-64. Oct 2 20:30:37.031124 systemd[1]: Detected first boot. Oct 2 20:30:37.031136 systemd[1]: Hostname set to . Oct 2 20:30:37.031152 systemd[1]: Initializing machine ID from random generator. Oct 2 20:30:37.031162 systemd[1]: Populated /etc with preset unit settings. Oct 2 20:30:37.031174 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:30:37.031184 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:30:37.031197 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:30:37.031209 kernel: kauditd_printk_skb: 42 callbacks suppressed Oct 2 20:30:37.031217 kernel: audit: type=1334 audit(1696278636.502:90): prog-id=12 op=LOAD Oct 2 20:30:37.031230 kernel: audit: type=1334 audit(1696278636.502:91): prog-id=3 op=UNLOAD Oct 2 20:30:37.031240 kernel: audit: type=1334 audit(1696278636.507:92): prog-id=13 op=LOAD Oct 2 20:30:37.031251 kernel: audit: type=1334 audit(1696278636.512:93): prog-id=14 op=LOAD Oct 2 20:30:37.031291 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 20:30:37.031300 kernel: audit: type=1334 audit(1696278636.512:94): prog-id=4 op=UNLOAD Oct 2 20:30:37.031311 kernel: audit: type=1334 audit(1696278636.512:95): prog-id=5 op=UNLOAD Oct 2 20:30:37.031321 kernel: audit: type=1131 audit(1696278636.514:96): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.031334 systemd[1]: Stopped initrd-switch-root.service. Oct 2 20:30:37.031345 kernel: audit: type=1130 audit(1696278636.559:97): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.031356 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 20:30:37.031367 kernel: audit: type=1131 audit(1696278636.559:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.031379 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 20:30:37.031389 kernel: audit: type=1334 audit(1696278636.582:99): prog-id=12 op=UNLOAD Oct 2 20:30:37.031402 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 20:30:37.031412 systemd[1]: Created slice system-getty.slice. Oct 2 20:30:37.031424 systemd[1]: Created slice system-modprobe.slice. Oct 2 20:30:37.031433 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 20:30:37.031443 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 20:30:37.031453 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 20:30:37.031462 systemd[1]: Created slice user.slice. Oct 2 20:30:37.031471 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:30:37.031481 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 20:30:37.031491 systemd[1]: Set up automount boot.automount. Oct 2 20:30:37.031504 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 20:30:37.031515 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 20:30:37.031526 systemd[1]: Stopped target initrd-fs.target. Oct 2 20:30:37.031539 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 20:30:37.031548 systemd[1]: Reached target integritysetup.target. Oct 2 20:30:37.031561 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:30:37.031571 systemd[1]: Reached target remote-fs.target. Oct 2 20:30:37.031585 systemd[1]: Reached target slices.target. Oct 2 20:30:37.031596 systemd[1]: Reached target swap.target. Oct 2 20:30:37.031608 systemd[1]: Reached target torcx.target. Oct 2 20:30:37.031620 systemd[1]: Reached target veritysetup.target. Oct 2 20:30:37.031630 systemd[1]: Listening on systemd-coredump.socket. Oct 2 20:30:37.031642 systemd[1]: Listening on systemd-initctl.socket. Oct 2 20:30:37.031654 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:30:37.031668 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:30:37.031681 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:30:37.031692 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 20:30:37.031703 systemd[1]: Mounting dev-hugepages.mount... Oct 2 20:30:37.031714 systemd[1]: Mounting dev-mqueue.mount... Oct 2 20:30:37.031726 systemd[1]: Mounting media.mount... Oct 2 20:30:37.031738 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:30:37.031750 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 20:30:37.031763 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 20:30:37.031775 systemd[1]: Mounting tmp.mount... Oct 2 20:30:37.031785 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 20:30:37.031796 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 20:30:37.031807 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:30:37.031820 systemd[1]: Starting modprobe@configfs.service... Oct 2 20:30:37.031829 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 20:30:37.031842 systemd[1]: Starting modprobe@drm.service... Oct 2 20:30:37.031858 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 20:30:37.031868 systemd[1]: Starting modprobe@fuse.service... Oct 2 20:30:37.031881 systemd[1]: Starting modprobe@loop.service... Oct 2 20:30:37.031893 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 20:30:37.031904 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 20:30:37.031915 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 20:30:37.031926 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 20:30:37.031939 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 20:30:37.031952 systemd[1]: Stopped systemd-journald.service. Oct 2 20:30:37.031964 systemd[1]: Starting systemd-journald.service... Oct 2 20:30:37.031977 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:30:37.031986 systemd[1]: Starting systemd-network-generator.service... Oct 2 20:30:37.031999 systemd[1]: Starting systemd-remount-fs.service... Oct 2 20:30:37.032009 kernel: loop: module loaded Oct 2 20:30:37.032020 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:30:37.032030 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 20:30:37.032043 systemd[1]: Stopped verity-setup.service. Oct 2 20:30:37.032055 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:30:37.032068 systemd[1]: Mounted dev-hugepages.mount. Oct 2 20:30:37.032080 systemd[1]: Mounted dev-mqueue.mount. Oct 2 20:30:37.032092 systemd[1]: Mounted media.mount. Oct 2 20:30:37.032104 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 20:30:37.032119 systemd-journald[1152]: Journal started Oct 2 20:30:37.032169 systemd-journald[1152]: Runtime Journal (/run/log/journal/b37ba36a193e47e4aa9562e3c60aff94) is 8.0M, max 159.0M, 151.0M free. Oct 2 20:30:25.497000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 20:30:26.498000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 20:30:26.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:30:26.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:30:26.514000 audit: BPF prog-id=10 op=LOAD Oct 2 20:30:26.514000 audit: BPF prog-id=10 op=UNLOAD Oct 2 20:30:26.514000 audit: BPF prog-id=11 op=LOAD Oct 2 20:30:26.514000 audit: BPF prog-id=11 op=UNLOAD Oct 2 20:30:36.502000 audit: BPF prog-id=12 op=LOAD Oct 2 20:30:36.502000 audit: BPF prog-id=3 op=UNLOAD Oct 2 20:30:36.507000 audit: BPF prog-id=13 op=LOAD Oct 2 20:30:36.512000 audit: BPF prog-id=14 op=LOAD Oct 2 20:30:36.512000 audit: BPF prog-id=4 op=UNLOAD Oct 2 20:30:36.512000 audit: BPF prog-id=5 op=UNLOAD Oct 2 20:30:36.514000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:36.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:36.559000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:36.582000 audit: BPF prog-id=12 op=UNLOAD Oct 2 20:30:36.917000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:36.929000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:36.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:36.935000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:36.936000 audit: BPF prog-id=15 op=LOAD Oct 2 20:30:36.937000 audit: BPF prog-id=16 op=LOAD Oct 2 20:30:36.937000 audit: BPF prog-id=17 op=LOAD Oct 2 20:30:36.937000 audit: BPF prog-id=13 op=UNLOAD Oct 2 20:30:36.937000 audit: BPF prog-id=14 op=UNLOAD Oct 2 20:30:37.003000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.028000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 20:30:37.028000 audit[1152]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7ffc31ee2250 a2=4000 a3=7ffc31ee22ec items=0 ppid=1 pid=1152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:30:37.028000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 20:30:36.500558 systemd[1]: Queued start job for default target multi-user.target. Oct 2 20:30:27.580059 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:27Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:30:36.514008 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 20:30:27.587721 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:27Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:30:27.587745 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:27Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:30:27.587782 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:27Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 20:30:27.587793 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:27Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 20:30:27.587852 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:27Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 20:30:27.587868 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:27Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 20:30:27.588072 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:27Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 20:30:27.588122 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:27Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:30:27.588138 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:27Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:30:27.588567 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:27Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 20:30:27.588603 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:27Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 20:30:27.588622 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:27Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 20:30:27.588637 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:27Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 20:30:27.588655 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:27Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 20:30:27.588669 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:27Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 20:30:35.459127 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:35Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:30:35.459443 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:35Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:30:35.459554 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:35Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:30:35.459743 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:35Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:30:35.459794 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:35Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 20:30:35.459856 /usr/lib/systemd/system-generators/torcx-generator[1043]: time="2023-10-02T20:30:35Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 20:30:37.060617 systemd[1]: Started systemd-journald.service. Oct 2 20:30:37.060000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.061742 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 20:30:37.065559 kernel: fuse: init (API version 7.34) Oct 2 20:30:37.066137 systemd[1]: Mounted tmp.mount. Oct 2 20:30:37.068292 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 20:30:37.070000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.070712 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:30:37.072000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.073272 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 20:30:37.073416 systemd[1]: Finished modprobe@configfs.service. Oct 2 20:30:37.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.076356 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 20:30:37.076501 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 20:30:37.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.078932 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 20:30:37.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.079164 systemd[1]: Finished modprobe@drm.service. Oct 2 20:30:37.081434 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 20:30:37.081791 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 20:30:37.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.084203 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 20:30:37.084761 systemd[1]: Finished modprobe@fuse.service. Oct 2 20:30:37.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.086000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.087054 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 20:30:37.087239 systemd[1]: Finished modprobe@loop.service. Oct 2 20:30:37.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.089719 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:30:37.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.092234 systemd[1]: Finished systemd-network-generator.service. Oct 2 20:30:37.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.094923 systemd[1]: Finished systemd-remount-fs.service. Oct 2 20:30:37.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.097754 systemd[1]: Reached target network-pre.target. Oct 2 20:30:37.101649 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 20:30:37.108153 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 20:30:37.112373 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 20:30:37.126699 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 20:30:37.130853 systemd[1]: Starting systemd-journal-flush.service... Oct 2 20:30:37.133544 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 20:30:37.135060 systemd[1]: Starting systemd-random-seed.service... Oct 2 20:30:37.137411 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 20:30:37.139458 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:30:37.143543 systemd[1]: Starting systemd-sysusers.service... Oct 2 20:30:37.149577 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 20:30:37.153510 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 20:30:37.162175 systemd[1]: Finished systemd-random-seed.service. Oct 2 20:30:37.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.170363 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:30:37.171588 systemd-journald[1152]: Time spent on flushing to /var/log/journal/b37ba36a193e47e4aa9562e3c60aff94 is 28.759ms for 1175 entries. Oct 2 20:30:37.171588 systemd-journald[1152]: System Journal (/var/log/journal/b37ba36a193e47e4aa9562e3c60aff94) is 8.0M, max 2.6G, 2.6G free. Oct 2 20:30:37.307969 systemd-journald[1152]: Received client request to flush runtime journal. Oct 2 20:30:37.171000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.177054 systemd[1]: Reached target first-boot-complete.target. Oct 2 20:30:37.180896 systemd[1]: Starting systemd-udev-settle.service... Oct 2 20:30:37.309150 udevadm[1166]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 20:30:37.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.222396 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:30:37.309073 systemd[1]: Finished systemd-journal-flush.service. Oct 2 20:30:37.617767 systemd[1]: Finished systemd-sysusers.service. Oct 2 20:30:37.620000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.621633 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:30:37.915832 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:30:37.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:38.334424 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 20:30:38.336000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:38.337000 audit: BPF prog-id=18 op=LOAD Oct 2 20:30:38.337000 audit: BPF prog-id=19 op=LOAD Oct 2 20:30:38.337000 audit: BPF prog-id=7 op=UNLOAD Oct 2 20:30:38.337000 audit: BPF prog-id=8 op=UNLOAD Oct 2 20:30:38.338515 systemd[1]: Starting systemd-udevd.service... Oct 2 20:30:38.356279 systemd-udevd[1171]: Using default interface naming scheme 'v252'. Oct 2 20:30:39.626091 systemd[1]: Started systemd-udevd.service. Oct 2 20:30:39.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:39.630000 audit: BPF prog-id=20 op=LOAD Oct 2 20:30:39.631678 systemd[1]: Starting systemd-networkd.service... Oct 2 20:30:39.663203 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 20:30:39.707000 audit: BPF prog-id=21 op=LOAD Oct 2 20:30:39.707000 audit: BPF prog-id=22 op=LOAD Oct 2 20:30:39.707000 audit: BPF prog-id=23 op=LOAD Oct 2 20:30:39.709177 systemd[1]: Starting systemd-userdbd.service... Oct 2 20:30:39.723489 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 20:30:39.762797 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 20:30:39.762889 kernel: hv_vmbus: registering driver hv_utils Oct 2 20:30:39.780047 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 20:30:39.780140 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 20:30:39.780191 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 20:30:39.900684 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 20:30:39.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:39.898121 systemd[1]: Started systemd-userdbd.service. Oct 2 20:30:39.766000 audit[1185]: AVC avc: denied { confidentiality } for pid=1185 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 20:30:39.911077 kernel: hv_vmbus: registering driver hv_balloon Oct 2 20:30:39.922046 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 20:30:39.766000 audit[1185]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55c423733dd0 a1=f884 a2=7fbe4ed3ebc5 a3=5 items=10 ppid=1171 pid=1185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:30:39.766000 audit: CWD cwd="/" Oct 2 20:30:39.766000 audit: PATH item=0 name=(null) inode=15871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:39.766000 audit: PATH item=1 name=(null) inode=15872 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:39.766000 audit: PATH item=2 name=(null) inode=15871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:39.766000 audit: PATH item=3 name=(null) inode=15873 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:39.766000 audit: PATH item=4 name=(null) inode=15871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:39.766000 audit: PATH item=5 name=(null) inode=15874 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:39.766000 audit: PATH item=6 name=(null) inode=15871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:39.766000 audit: PATH item=7 name=(null) inode=15875 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:39.766000 audit: PATH item=8 name=(null) inode=15871 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:39.766000 audit: PATH item=9 name=(null) inode=15876 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:39.766000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 20:30:39.953070 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 20:30:39.953141 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 20:30:39.965729 kernel: Console: switching to colour dummy device 80x25 Oct 2 20:30:39.967021 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 20:30:40.094810 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1181) Oct 2 20:30:40.154966 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:30:40.203442 systemd-networkd[1177]: lo: Link UP Oct 2 20:30:40.203789 systemd-networkd[1177]: lo: Gained carrier Oct 2 20:30:40.204510 systemd-networkd[1177]: Enumeration completed Oct 2 20:30:40.204714 systemd[1]: Started systemd-networkd.service. Oct 2 20:30:40.209077 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:30:40.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.230019 kernel: KVM: vmx: using Hyper-V Enlightened VMCS Oct 2 20:30:40.249382 systemd[1]: Finished systemd-udev-settle.service. Oct 2 20:30:40.250608 systemd-networkd[1177]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:30:40.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.253479 systemd[1]: Starting lvm2-activation-early.service... Oct 2 20:30:40.306026 kernel: mlx5_core f36f:00:02.0 enP62319s1: Link up Oct 2 20:30:40.359022 kernel: hv_netvsc 000d3ab4-fc45-000d-3ab4-fc45000d3ab4 eth0: Data path switched to VF: enP62319s1 Oct 2 20:30:40.360169 systemd-networkd[1177]: enP62319s1: Link UP Oct 2 20:30:40.360312 systemd-networkd[1177]: eth0: Link UP Oct 2 20:30:40.360317 systemd-networkd[1177]: eth0: Gained carrier Oct 2 20:30:40.365312 systemd-networkd[1177]: enP62319s1: Gained carrier Oct 2 20:30:40.389137 systemd-networkd[1177]: eth0: DHCPv4 address 10.200.8.16/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 20:30:40.590783 lvm[1249]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:30:40.621164 systemd[1]: Finished lvm2-activation-early.service. Oct 2 20:30:40.623000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.624127 systemd[1]: Reached target cryptsetup.target. Oct 2 20:30:40.627449 systemd[1]: Starting lvm2-activation.service... Oct 2 20:30:40.633498 lvm[1250]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:30:40.660136 systemd[1]: Finished lvm2-activation.service. Oct 2 20:30:40.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.663064 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:30:40.665647 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 20:30:40.665685 systemd[1]: Reached target local-fs.target. Oct 2 20:30:40.667865 systemd[1]: Reached target machines.target. Oct 2 20:30:40.671586 systemd[1]: Starting ldconfig.service... Oct 2 20:30:40.683395 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 20:30:40.683515 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:30:40.684838 systemd[1]: Starting systemd-boot-update.service... Oct 2 20:30:40.695185 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 20:30:40.699369 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 20:30:40.702352 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:30:40.702450 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:30:40.703916 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 20:30:40.732786 systemd-tmpfiles[1255]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 20:30:40.737887 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 20:30:40.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.746554 systemd-tmpfiles[1255]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 20:30:40.775785 systemd-tmpfiles[1255]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 20:30:40.824039 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1252 (bootctl) Oct 2 20:30:40.826028 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 20:30:41.564649 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 20:30:41.565295 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 20:30:41.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:41.751274 systemd-networkd[1177]: eth0: Gained IPv6LL Oct 2 20:30:41.756845 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:30:41.773631 kernel: kauditd_printk_skb: 68 callbacks suppressed Oct 2 20:30:41.773685 kernel: audit: type=1130 audit(1696278641.756:153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:41.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:42.188846 systemd-fsck[1260]: fsck.fat 4.2 (2021-01-31) Oct 2 20:30:42.188846 systemd-fsck[1260]: /dev/sda1: 789 files, 115069/258078 clusters Oct 2 20:30:42.191246 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 20:30:42.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:42.196133 systemd[1]: Mounting boot.mount... Oct 2 20:30:42.208015 kernel: audit: type=1130 audit(1696278642.193:154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:42.215240 systemd[1]: Mounted boot.mount. Oct 2 20:30:42.230158 systemd[1]: Finished systemd-boot-update.service. Oct 2 20:30:42.232000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:42.245104 kernel: audit: type=1130 audit(1696278642.232:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:43.236958 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 20:30:43.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:43.240702 systemd[1]: Starting audit-rules.service... Oct 2 20:30:43.252485 kernel: audit: type=1130 audit(1696278643.238:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:43.254155 systemd[1]: Starting clean-ca-certificates.service... Oct 2 20:30:43.257868 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 20:30:43.262000 audit: BPF prog-id=24 op=LOAD Oct 2 20:30:43.264960 systemd[1]: Starting systemd-resolved.service... Oct 2 20:30:43.269021 kernel: audit: type=1334 audit(1696278643.262:157): prog-id=24 op=LOAD Oct 2 20:30:43.276618 kernel: audit: type=1334 audit(1696278643.270:158): prog-id=25 op=LOAD Oct 2 20:30:43.270000 audit: BPF prog-id=25 op=LOAD Oct 2 20:30:43.274849 systemd[1]: Starting systemd-timesyncd.service... Oct 2 20:30:43.278377 systemd[1]: Starting systemd-update-utmp.service... Oct 2 20:30:43.297000 audit[1272]: SYSTEM_BOOT pid=1272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:30:43.313592 kernel: audit: type=1127 audit(1696278643.297:159): pid=1272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:30:43.320434 systemd[1]: Finished systemd-update-utmp.service. Oct 2 20:30:43.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:43.336111 kernel: audit: type=1130 audit(1696278643.322:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:43.355775 systemd[1]: Finished clean-ca-certificates.service. Oct 2 20:30:43.374115 kernel: audit: type=1130 audit(1696278643.358:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:43.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:43.359047 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 20:30:43.393113 systemd[1]: Started systemd-timesyncd.service. Oct 2 20:30:43.409345 kernel: audit: type=1130 audit(1696278643.395:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:43.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:43.395628 systemd[1]: Reached target time-set.target. Oct 2 20:30:43.505568 systemd-resolved[1270]: Positive Trust Anchors: Oct 2 20:30:43.505591 systemd-resolved[1270]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:30:43.505647 systemd-resolved[1270]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:30:43.528988 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 20:30:43.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:43.570000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 20:30:43.570000 audit[1287]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe2e519c70 a2=420 a3=0 items=0 ppid=1266 pid=1287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:30:43.570000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 20:30:43.571437 augenrules[1287]: No rules Oct 2 20:30:43.571915 systemd[1]: Finished audit-rules.service. Oct 2 20:30:43.631070 systemd-resolved[1270]: Using system hostname 'ci-3510.3.0-a-2276519d4a'. Oct 2 20:30:43.632918 systemd[1]: Started systemd-resolved.service. Oct 2 20:30:43.635728 systemd[1]: Reached target network.target. Oct 2 20:30:43.638282 systemd[1]: Reached target network-online.target. Oct 2 20:30:43.640791 systemd[1]: Reached target nss-lookup.target. Oct 2 20:30:43.793458 systemd-timesyncd[1271]: Contacted time server 162.159.200.123:123 (0.flatcar.pool.ntp.org). Oct 2 20:30:43.793548 systemd-timesyncd[1271]: Initial clock synchronization to Mon 2023-10-02 20:30:43.792603 UTC. Oct 2 20:30:48.143387 ldconfig[1251]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 20:30:48.155179 systemd[1]: Finished ldconfig.service. Oct 2 20:30:48.159352 systemd[1]: Starting systemd-update-done.service... Oct 2 20:30:48.178161 systemd[1]: Finished systemd-update-done.service. Oct 2 20:30:48.181125 systemd[1]: Reached target sysinit.target. Oct 2 20:30:48.183362 systemd[1]: Started motdgen.path. Oct 2 20:30:48.185587 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 20:30:48.188587 systemd[1]: Started logrotate.timer. Oct 2 20:30:48.190562 systemd[1]: Started mdadm.timer. Oct 2 20:30:48.192292 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 20:30:48.194468 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 20:30:48.194507 systemd[1]: Reached target paths.target. Oct 2 20:30:48.196513 systemd[1]: Reached target timers.target. Oct 2 20:30:48.198701 systemd[1]: Listening on dbus.socket. Oct 2 20:30:48.201775 systemd[1]: Starting docker.socket... Oct 2 20:30:48.225252 systemd[1]: Listening on sshd.socket. Oct 2 20:30:48.228252 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:30:48.228865 systemd[1]: Listening on docker.socket. Oct 2 20:30:48.231502 systemd[1]: Reached target sockets.target. Oct 2 20:30:48.233894 systemd[1]: Reached target basic.target. Oct 2 20:30:48.236143 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:30:48.236178 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:30:48.237299 systemd[1]: Starting containerd.service... Oct 2 20:30:48.240276 systemd[1]: Starting dbus.service... Oct 2 20:30:48.243152 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 20:30:48.246425 systemd[1]: Starting extend-filesystems.service... Oct 2 20:30:48.249102 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 20:30:48.250378 systemd[1]: Starting motdgen.service... Oct 2 20:30:48.253758 systemd[1]: Started nvidia.service. Oct 2 20:30:48.257984 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 20:30:48.261216 systemd[1]: Starting prepare-critools.service... Oct 2 20:30:48.264267 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 20:30:48.267546 systemd[1]: Starting sshd-keygen.service... Oct 2 20:30:48.272554 systemd[1]: Starting systemd-logind.service... Oct 2 20:30:48.288634 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:30:48.288723 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 20:30:48.289404 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 20:30:48.290315 systemd[1]: Starting update-engine.service... Oct 2 20:30:48.293730 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 20:30:48.300093 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 20:30:48.300337 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 20:30:48.340232 jq[1297]: false Oct 2 20:30:48.341269 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 20:30:48.346702 jq[1312]: true Oct 2 20:30:48.341481 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 20:30:48.352954 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 20:30:48.353181 systemd[1]: Finished motdgen.service. Oct 2 20:30:48.360617 extend-filesystems[1298]: Found sda Oct 2 20:30:48.360617 extend-filesystems[1298]: Found sda1 Oct 2 20:30:48.360617 extend-filesystems[1298]: Found sda2 Oct 2 20:30:48.360617 extend-filesystems[1298]: Found sda3 Oct 2 20:30:48.360617 extend-filesystems[1298]: Found usr Oct 2 20:30:48.360617 extend-filesystems[1298]: Found sda4 Oct 2 20:30:48.360617 extend-filesystems[1298]: Found sda6 Oct 2 20:30:48.360617 extend-filesystems[1298]: Found sda7 Oct 2 20:30:48.360617 extend-filesystems[1298]: Found sda9 Oct 2 20:30:48.360617 extend-filesystems[1298]: Checking size of /dev/sda9 Oct 2 20:30:48.381719 jq[1323]: true Oct 2 20:30:48.420959 tar[1315]: crictl Oct 2 20:30:48.421369 tar[1314]: ./ Oct 2 20:30:48.421369 tar[1314]: ./loopback Oct 2 20:30:48.450137 systemd-logind[1309]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 20:30:48.464487 systemd-logind[1309]: New seat seat0. Oct 2 20:30:48.476527 extend-filesystems[1298]: Old size kept for /dev/sda9 Oct 2 20:30:48.479314 extend-filesystems[1298]: Found sr0 Oct 2 20:30:48.482068 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 20:30:48.482288 systemd[1]: Finished extend-filesystems.service. Oct 2 20:30:48.586570 env[1325]: time="2023-10-02T20:30:48.586510286Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 20:30:48.587375 bash[1346]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:30:48.588274 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 20:30:48.595207 dbus-daemon[1296]: [system] SELinux support is enabled Oct 2 20:30:48.595374 systemd[1]: Started dbus.service. Oct 2 20:30:48.600067 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 20:30:48.600097 systemd[1]: Reached target system-config.target. Oct 2 20:30:48.602557 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 20:30:48.602577 systemd[1]: Reached target user-config.target. Oct 2 20:30:48.607571 systemd[1]: Started systemd-logind.service. Oct 2 20:30:48.610775 dbus-daemon[1296]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 20:30:48.618529 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 20:30:48.628137 tar[1314]: ./bandwidth Oct 2 20:30:48.767194 env[1325]: time="2023-10-02T20:30:48.767136516Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 20:30:48.773318 env[1325]: time="2023-10-02T20:30:48.773273099Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:30:48.775251 env[1325]: time="2023-10-02T20:30:48.775213631Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:30:48.775379 env[1325]: time="2023-10-02T20:30:48.775361226Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:30:48.775740 env[1325]: time="2023-10-02T20:30:48.775710113Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:30:48.775849 env[1325]: time="2023-10-02T20:30:48.775832809Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 20:30:48.775935 env[1325]: time="2023-10-02T20:30:48.775919406Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 20:30:48.776019 env[1325]: time="2023-10-02T20:30:48.775986704Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 20:30:48.776186 env[1325]: time="2023-10-02T20:30:48.776166597Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:30:48.781307 env[1325]: time="2023-10-02T20:30:48.781282017Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:30:48.781617 env[1325]: time="2023-10-02T20:30:48.781591606Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:30:48.781700 env[1325]: time="2023-10-02T20:30:48.781685903Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 20:30:48.782101 env[1325]: time="2023-10-02T20:30:48.782080589Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 20:30:48.782184 env[1325]: time="2023-10-02T20:30:48.782172385Z" level=info msg="metadata content store policy set" policy=shared Oct 2 20:30:48.793804 tar[1314]: ./ptp Oct 2 20:30:48.800683 env[1325]: time="2023-10-02T20:30:48.798365514Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 20:30:48.800683 env[1325]: time="2023-10-02T20:30:48.798408813Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 20:30:48.800683 env[1325]: time="2023-10-02T20:30:48.798429512Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 20:30:48.800683 env[1325]: time="2023-10-02T20:30:48.798480710Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 20:30:48.800683 env[1325]: time="2023-10-02T20:30:48.798502009Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 20:30:48.800683 env[1325]: time="2023-10-02T20:30:48.798575307Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 20:30:48.800683 env[1325]: time="2023-10-02T20:30:48.798595806Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 20:30:48.800683 env[1325]: time="2023-10-02T20:30:48.798615505Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 20:30:48.800683 env[1325]: time="2023-10-02T20:30:48.798634405Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 20:30:48.800683 env[1325]: time="2023-10-02T20:30:48.798655104Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 20:30:48.800683 env[1325]: time="2023-10-02T20:30:48.798674003Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 20:30:48.800683 env[1325]: time="2023-10-02T20:30:48.798692003Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 20:30:48.800683 env[1325]: time="2023-10-02T20:30:48.798812299Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 20:30:48.800683 env[1325]: time="2023-10-02T20:30:48.798903595Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 20:30:48.801268 env[1325]: time="2023-10-02T20:30:48.799307481Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 20:30:48.801268 env[1325]: time="2023-10-02T20:30:48.799349080Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 20:30:48.801268 env[1325]: time="2023-10-02T20:30:48.799369179Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 20:30:48.801268 env[1325]: time="2023-10-02T20:30:48.799429477Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 20:30:48.801268 env[1325]: time="2023-10-02T20:30:48.799451676Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 20:30:48.801268 env[1325]: time="2023-10-02T20:30:48.799469375Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 20:30:48.801268 env[1325]: time="2023-10-02T20:30:48.799546873Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 20:30:48.801268 env[1325]: time="2023-10-02T20:30:48.799564772Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 20:30:48.801268 env[1325]: time="2023-10-02T20:30:48.799588471Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 20:30:48.801268 env[1325]: time="2023-10-02T20:30:48.799601871Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 20:30:48.801268 env[1325]: time="2023-10-02T20:30:48.799618670Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 20:30:48.801268 env[1325]: time="2023-10-02T20:30:48.799638569Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 20:30:48.801268 env[1325]: time="2023-10-02T20:30:48.799785764Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 20:30:48.801268 env[1325]: time="2023-10-02T20:30:48.799808263Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 20:30:48.801268 env[1325]: time="2023-10-02T20:30:48.799825863Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 20:30:48.801822 env[1325]: time="2023-10-02T20:30:48.799842862Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 20:30:48.801822 env[1325]: time="2023-10-02T20:30:48.799862861Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 20:30:48.801822 env[1325]: time="2023-10-02T20:30:48.799879461Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 20:30:48.801822 env[1325]: time="2023-10-02T20:30:48.799903360Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 20:30:48.801822 env[1325]: time="2023-10-02T20:30:48.799947458Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 20:30:48.802027 env[1325]: time="2023-10-02T20:30:48.800233848Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 20:30:48.802027 env[1325]: time="2023-10-02T20:30:48.800309046Z" level=info msg="Connect containerd service" Oct 2 20:30:48.802027 env[1325]: time="2023-10-02T20:30:48.800350744Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 20:30:48.831390 env[1325]: time="2023-10-02T20:30:48.802494269Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 20:30:48.831390 env[1325]: time="2023-10-02T20:30:48.802800158Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 20:30:48.831390 env[1325]: time="2023-10-02T20:30:48.802850856Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 20:30:48.831390 env[1325]: time="2023-10-02T20:30:48.802910354Z" level=info msg="containerd successfully booted in 0.218476s" Oct 2 20:30:48.831390 env[1325]: time="2023-10-02T20:30:48.805643358Z" level=info msg="Start subscribing containerd event" Oct 2 20:30:48.831390 env[1325]: time="2023-10-02T20:30:48.805705255Z" level=info msg="Start recovering state" Oct 2 20:30:48.831390 env[1325]: time="2023-10-02T20:30:48.805774253Z" level=info msg="Start event monitor" Oct 2 20:30:48.831390 env[1325]: time="2023-10-02T20:30:48.805799652Z" level=info msg="Start snapshots syncer" Oct 2 20:30:48.831390 env[1325]: time="2023-10-02T20:30:48.805811652Z" level=info msg="Start cni network conf syncer for default" Oct 2 20:30:48.831390 env[1325]: time="2023-10-02T20:30:48.805823151Z" level=info msg="Start streaming server" Oct 2 20:30:48.802976 systemd[1]: Started containerd.service. Oct 2 20:30:48.930405 tar[1314]: ./vlan Oct 2 20:30:49.015873 tar[1314]: ./host-device Oct 2 20:30:49.104107 update_engine[1311]: I1002 20:30:49.103236 1311 main.cc:92] Flatcar Update Engine starting Oct 2 20:30:49.113845 tar[1314]: ./tuning Oct 2 20:30:49.127166 systemd[1]: Finished prepare-critools.service. Oct 2 20:30:49.147402 systemd[1]: Started update-engine.service. Oct 2 20:30:49.147734 update_engine[1311]: I1002 20:30:49.147493 1311 update_check_scheduler.cc:74] Next update check in 8m10s Oct 2 20:30:49.152606 systemd[1]: Started locksmithd.service. Oct 2 20:30:49.167152 tar[1314]: ./vrf Oct 2 20:30:49.206844 tar[1314]: ./sbr Oct 2 20:30:49.245277 tar[1314]: ./tap Oct 2 20:30:49.289426 tar[1314]: ./dhcp Oct 2 20:30:49.401212 tar[1314]: ./static Oct 2 20:30:49.433251 tar[1314]: ./firewall Oct 2 20:30:49.482492 tar[1314]: ./macvlan Oct 2 20:30:49.527157 tar[1314]: ./dummy Oct 2 20:30:49.570710 tar[1314]: ./bridge Oct 2 20:30:49.618526 tar[1314]: ./ipvlan Oct 2 20:30:49.663651 tar[1314]: ./portmap Oct 2 20:30:49.705604 tar[1314]: ./host-local Oct 2 20:30:49.778516 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 20:30:50.084371 sshd_keygen[1319]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 20:30:50.104518 systemd[1]: Finished sshd-keygen.service. Oct 2 20:30:50.108669 systemd[1]: Starting issuegen.service... Oct 2 20:30:50.119336 systemd[1]: Started waagent.service. Oct 2 20:30:50.122619 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 20:30:50.122857 systemd[1]: Finished issuegen.service. Oct 2 20:30:50.127541 systemd[1]: Starting systemd-user-sessions.service... Oct 2 20:30:50.146955 systemd[1]: Finished systemd-user-sessions.service. Oct 2 20:30:50.151587 systemd[1]: Started getty@tty1.service. Oct 2 20:30:50.155515 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 20:30:50.158337 systemd[1]: Reached target getty.target. Oct 2 20:30:50.160729 systemd[1]: Reached target multi-user.target. Oct 2 20:30:50.164812 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 20:30:50.172729 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 20:30:50.172916 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 20:30:50.176025 systemd[1]: Startup finished in 967ms (firmware) + 21.900s (loader) + 927ms (kernel) + 22.232s (initrd) + 25.122s (userspace) = 1min 11.149s. Oct 2 20:30:50.464095 login[1417]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 20:30:50.464278 login[1416]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 20:30:50.501391 systemd[1]: Created slice user-500.slice. Oct 2 20:30:50.503133 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 20:30:50.505882 systemd-logind[1309]: New session 2 of user core. Oct 2 20:30:50.508843 systemd-logind[1309]: New session 1 of user core. Oct 2 20:30:50.523649 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 20:30:50.525410 systemd[1]: Starting user@500.service... Oct 2 20:30:50.528803 (systemd)[1420]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:30:50.702350 systemd[1420]: Queued start job for default target default.target. Oct 2 20:30:50.702953 systemd[1420]: Reached target paths.target. Oct 2 20:30:50.702983 systemd[1420]: Reached target sockets.target. Oct 2 20:30:50.703016 systemd[1420]: Reached target timers.target. Oct 2 20:30:50.703035 systemd[1420]: Reached target basic.target. Oct 2 20:30:50.703095 systemd[1420]: Reached target default.target. Oct 2 20:30:50.703135 systemd[1420]: Startup finished in 167ms. Oct 2 20:30:50.703169 systemd[1]: Started user@500.service. Oct 2 20:30:50.704070 systemd[1]: Started session-1.scope. Oct 2 20:30:50.704859 systemd[1]: Started session-2.scope. Oct 2 20:30:50.743660 locksmithd[1396]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 20:30:55.773371 waagent[1414]: 2023-10-02T20:30:55.773256Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 20:30:55.777367 waagent[1414]: 2023-10-02T20:30:55.777286Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 20:30:55.779774 waagent[1414]: 2023-10-02T20:30:55.779705Z INFO Daemon Daemon Python: 3.9.16 Oct 2 20:30:55.782455 waagent[1414]: 2023-10-02T20:30:55.782379Z INFO Daemon Daemon Run daemon Oct 2 20:30:55.784788 waagent[1414]: 2023-10-02T20:30:55.784726Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 20:30:55.797576 waagent[1414]: 2023-10-02T20:30:55.797445Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 20:30:55.806185 waagent[1414]: 2023-10-02T20:30:55.806066Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 20:30:55.849899 waagent[1414]: 2023-10-02T20:30:55.807671Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 20:30:55.849899 waagent[1414]: 2023-10-02T20:30:55.808431Z INFO Daemon Daemon Using waagent for provisioning Oct 2 20:30:55.849899 waagent[1414]: 2023-10-02T20:30:55.810363Z INFO Daemon Daemon Activate resource disk Oct 2 20:30:55.849899 waagent[1414]: 2023-10-02T20:30:55.811116Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 20:30:55.849899 waagent[1414]: 2023-10-02T20:30:55.818927Z INFO Daemon Daemon Found device: None Oct 2 20:30:55.849899 waagent[1414]: 2023-10-02T20:30:55.819850Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 20:30:55.849899 waagent[1414]: 2023-10-02T20:30:55.820663Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 20:30:55.849899 waagent[1414]: 2023-10-02T20:30:55.822339Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 20:30:55.849899 waagent[1414]: 2023-10-02T20:30:55.823384Z INFO Daemon Daemon Running default provisioning handler Oct 2 20:30:55.849899 waagent[1414]: 2023-10-02T20:30:55.833466Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 20:30:55.849899 waagent[1414]: 2023-10-02T20:30:55.836452Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 20:30:55.849899 waagent[1414]: 2023-10-02T20:30:55.837182Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 20:30:55.849899 waagent[1414]: 2023-10-02T20:30:55.838094Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 20:30:55.856116 waagent[1414]: 2023-10-02T20:30:55.855918Z INFO Daemon Daemon Successfully mounted dvd Oct 2 20:30:55.964117 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 20:30:55.981544 waagent[1414]: 2023-10-02T20:30:55.981400Z INFO Daemon Daemon Detect protocol endpoint Oct 2 20:30:55.984853 waagent[1414]: 2023-10-02T20:30:55.984769Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 20:30:55.988176 waagent[1414]: 2023-10-02T20:30:55.988102Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 20:30:55.992362 waagent[1414]: 2023-10-02T20:30:55.992287Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 20:30:55.995449 waagent[1414]: 2023-10-02T20:30:55.995373Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 20:30:56.000648 waagent[1414]: 2023-10-02T20:30:56.000562Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 20:30:56.095167 waagent[1414]: 2023-10-02T20:30:56.094974Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 20:30:56.102482 waagent[1414]: 2023-10-02T20:30:56.097056Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 20:30:56.102482 waagent[1414]: 2023-10-02T20:30:56.097707Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 20:30:56.286224 waagent[1414]: 2023-10-02T20:30:56.286067Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 20:30:56.297419 waagent[1414]: 2023-10-02T20:30:56.297327Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 20:30:56.302578 waagent[1414]: 2023-10-02T20:30:56.298504Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 20:30:56.384757 waagent[1414]: 2023-10-02T20:30:56.384571Z INFO Daemon Daemon Found private key matching thumbprint DEED6E241AC538C1D56D3AD881E265DB501F3219 Oct 2 20:30:56.395487 waagent[1414]: 2023-10-02T20:30:56.386080Z INFO Daemon Daemon Certificate with thumbprint 2E7031982AD505D4022B58AF3FA6B23635A35956 has no matching private key. Oct 2 20:30:56.395487 waagent[1414]: 2023-10-02T20:30:56.386961Z INFO Daemon Daemon Fetch goal state completed Oct 2 20:30:56.442819 waagent[1414]: 2023-10-02T20:30:56.442721Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: ce36d631-3363-4cbf-beb3-699231b8a054 New eTag: 1163519873291784011] Oct 2 20:30:56.450677 waagent[1414]: 2023-10-02T20:30:56.444715Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 20:30:56.456807 waagent[1414]: 2023-10-02T20:30:56.456742Z INFO Daemon Daemon Starting provisioning Oct 2 20:30:56.463476 waagent[1414]: 2023-10-02T20:30:56.457952Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 20:30:56.463476 waagent[1414]: 2023-10-02T20:30:56.458791Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-2276519d4a] Oct 2 20:30:56.484759 waagent[1414]: 2023-10-02T20:30:56.484606Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-2276519d4a] Oct 2 20:30:56.492325 waagent[1414]: 2023-10-02T20:30:56.486810Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 20:30:56.492325 waagent[1414]: 2023-10-02T20:30:56.488094Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 20:30:56.501264 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 20:30:56.501523 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 20:30:56.501595 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 20:30:56.501899 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:30:56.507056 systemd-networkd[1177]: eth0: DHCPv6 lease lost Oct 2 20:30:56.508470 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:30:56.508670 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:30:56.510984 systemd[1]: Starting systemd-networkd.service... Oct 2 20:30:56.545554 systemd-networkd[1461]: enP62319s1: Link UP Oct 2 20:30:56.545564 systemd-networkd[1461]: enP62319s1: Gained carrier Oct 2 20:30:56.547324 systemd-networkd[1461]: eth0: Link UP Oct 2 20:30:56.547330 systemd-networkd[1461]: eth0: Gained carrier Oct 2 20:30:56.547884 systemd-networkd[1461]: lo: Link UP Oct 2 20:30:56.547889 systemd-networkd[1461]: lo: Gained carrier Oct 2 20:30:56.548272 systemd-networkd[1461]: eth0: Gained IPv6LL Oct 2 20:30:56.548859 systemd-networkd[1461]: Enumeration completed Oct 2 20:30:56.549102 systemd[1]: Started systemd-networkd.service. Oct 2 20:30:56.551654 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:30:56.555083 waagent[1414]: 2023-10-02T20:30:56.552713Z INFO Daemon Daemon Create user account if not exists Oct 2 20:30:56.555348 waagent[1414]: 2023-10-02T20:30:56.555276Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 20:30:56.556654 waagent[1414]: 2023-10-02T20:30:56.556600Z INFO Daemon Daemon Configure sudoer Oct 2 20:30:56.557991 waagent[1414]: 2023-10-02T20:30:56.557937Z INFO Daemon Daemon Configure sshd Oct 2 20:30:56.558697 waagent[1414]: 2023-10-02T20:30:56.558649Z INFO Daemon Daemon Deploy ssh public key. Oct 2 20:30:56.561609 systemd-networkd[1461]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:30:56.601140 systemd-networkd[1461]: eth0: DHCPv4 address 10.200.8.16/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 20:30:56.604836 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:30:56.608404 waagent[1414]: 2023-10-02T20:30:56.608280Z INFO Daemon Daemon Decode custom data Oct 2 20:30:56.611279 waagent[1414]: 2023-10-02T20:30:56.611203Z INFO Daemon Daemon Save custom data Oct 2 20:30:57.893051 waagent[1414]: 2023-10-02T20:30:57.892933Z INFO Daemon Daemon Provisioning complete Oct 2 20:30:57.908263 waagent[1414]: 2023-10-02T20:30:57.908185Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 20:30:57.915385 waagent[1414]: 2023-10-02T20:30:57.909570Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 20:30:57.915385 waagent[1414]: 2023-10-02T20:30:57.911263Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 20:30:58.180257 waagent[1473]: 2023-10-02T20:30:58.180072Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 20:30:58.180977 waagent[1473]: 2023-10-02T20:30:58.180908Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:30:58.181149 waagent[1473]: 2023-10-02T20:30:58.181092Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:30:58.192362 waagent[1473]: 2023-10-02T20:30:58.192277Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 20:30:58.192546 waagent[1473]: 2023-10-02T20:30:58.192488Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 20:30:58.258483 waagent[1473]: 2023-10-02T20:30:58.258359Z INFO ExtHandler ExtHandler Found private key matching thumbprint DEED6E241AC538C1D56D3AD881E265DB501F3219 Oct 2 20:30:58.258713 waagent[1473]: 2023-10-02T20:30:58.258656Z INFO ExtHandler ExtHandler Certificate with thumbprint 2E7031982AD505D4022B58AF3FA6B23635A35956 has no matching private key. Oct 2 20:30:58.258953 waagent[1473]: 2023-10-02T20:30:58.258902Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 20:30:58.272929 waagent[1473]: 2023-10-02T20:30:58.272857Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 159138bb-d68e-4393-8c05-f3f94e74eda1 New eTag: 1163519873291784011] Oct 2 20:30:58.273546 waagent[1473]: 2023-10-02T20:30:58.273486Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 20:30:58.344517 waagent[1473]: 2023-10-02T20:30:58.344379Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 20:30:58.353375 waagent[1473]: 2023-10-02T20:30:58.353280Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1473 Oct 2 20:30:58.356863 waagent[1473]: 2023-10-02T20:30:58.356787Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 20:30:58.358156 waagent[1473]: 2023-10-02T20:30:58.358095Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 20:30:58.406919 waagent[1473]: 2023-10-02T20:30:58.406851Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 20:30:58.407350 waagent[1473]: 2023-10-02T20:30:58.407286Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 20:30:58.415219 waagent[1473]: 2023-10-02T20:30:58.415161Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 20:30:58.415720 waagent[1473]: 2023-10-02T20:30:58.415659Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 20:30:58.416801 waagent[1473]: 2023-10-02T20:30:58.416736Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 20:30:58.418111 waagent[1473]: 2023-10-02T20:30:58.418050Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 20:30:58.418509 waagent[1473]: 2023-10-02T20:30:58.418453Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:30:58.418659 waagent[1473]: 2023-10-02T20:30:58.418612Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:30:58.419200 waagent[1473]: 2023-10-02T20:30:58.419137Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 20:30:58.419487 waagent[1473]: 2023-10-02T20:30:58.419432Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 20:30:58.419487 waagent[1473]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 20:30:58.419487 waagent[1473]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 20:30:58.419487 waagent[1473]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 20:30:58.419487 waagent[1473]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:30:58.419487 waagent[1473]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:30:58.419487 waagent[1473]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:30:58.422115 waagent[1473]: 2023-10-02T20:30:58.422022Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 20:30:58.422559 waagent[1473]: 2023-10-02T20:30:58.422497Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 20:30:58.422687 waagent[1473]: 2023-10-02T20:30:58.422632Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 20:30:58.423160 waagent[1473]: 2023-10-02T20:30:58.423098Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 20:30:58.423278 waagent[1473]: 2023-10-02T20:30:58.423220Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 20:30:58.424709 waagent[1473]: 2023-10-02T20:30:58.424657Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:30:58.425006 waagent[1473]: 2023-10-02T20:30:58.424946Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 20:30:58.425688 waagent[1473]: 2023-10-02T20:30:58.425639Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:30:58.426407 waagent[1473]: 2023-10-02T20:30:58.426351Z INFO EnvHandler ExtHandler Configure routes Oct 2 20:30:58.430564 waagent[1473]: 2023-10-02T20:30:58.430466Z INFO EnvHandler ExtHandler Gateway:None Oct 2 20:30:58.430668 waagent[1473]: 2023-10-02T20:30:58.430614Z INFO EnvHandler ExtHandler Routes:None Oct 2 20:30:58.434104 waagent[1473]: 2023-10-02T20:30:58.434054Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 20:30:58.435437 waagent[1473]: 2023-10-02T20:30:58.435387Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 20:30:58.437761 waagent[1473]: 2023-10-02T20:30:58.437716Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 20:30:58.453419 waagent[1473]: 2023-10-02T20:30:58.453341Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1461' Oct 2 20:30:58.499049 waagent[1473]: 2023-10-02T20:30:58.498965Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 20:30:58.523331 waagent[1473]: 2023-10-02T20:30:58.523182Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 20:30:58.523331 waagent[1473]: Executing ['ip', '-a', '-o', 'link']: Oct 2 20:30:58.523331 waagent[1473]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 20:30:58.523331 waagent[1473]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b4:fc:45 brd ff:ff:ff:ff:ff:ff Oct 2 20:30:58.523331 waagent[1473]: 3: enP62319s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b4:fc:45 brd ff:ff:ff:ff:ff:ff\ altname enP62319p0s2 Oct 2 20:30:58.523331 waagent[1473]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 20:30:58.523331 waagent[1473]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 20:30:58.523331 waagent[1473]: 2: eth0 inet 10.200.8.16/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 20:30:58.523331 waagent[1473]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 20:30:58.523331 waagent[1473]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 20:30:58.523331 waagent[1473]: 2: eth0 inet6 fe80::20d:3aff:feb4:fc45/64 scope link \ valid_lft forever preferred_lft forever Oct 2 20:30:58.979908 waagent[1473]: 2023-10-02T20:30:58.979772Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules Oct 2 20:30:58.982971 waagent[1473]: 2023-10-02T20:30:58.982861Z INFO EnvHandler ExtHandler Firewall rules: Oct 2 20:30:58.982971 waagent[1473]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:30:58.982971 waagent[1473]: pkts bytes target prot opt in out source destination Oct 2 20:30:58.982971 waagent[1473]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:30:58.982971 waagent[1473]: pkts bytes target prot opt in out source destination Oct 2 20:30:58.982971 waagent[1473]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:30:58.982971 waagent[1473]: pkts bytes target prot opt in out source destination Oct 2 20:30:58.982971 waagent[1473]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 20:30:58.982971 waagent[1473]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 20:30:58.984351 waagent[1473]: 2023-10-02T20:30:58.984298Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 20:30:59.287111 waagent[1473]: 2023-10-02T20:30:59.287034Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.10.0.3 -- exiting Oct 2 20:30:59.915557 waagent[1414]: 2023-10-02T20:30:59.915377Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 20:30:59.922898 waagent[1414]: 2023-10-02T20:30:59.922815Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.10.0.3 to be the latest agent Oct 2 20:31:00.927420 waagent[1513]: 2023-10-02T20:31:00.927305Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.10.0.3) Oct 2 20:31:00.928138 waagent[1513]: 2023-10-02T20:31:00.928069Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 20:31:00.928296 waagent[1513]: 2023-10-02T20:31:00.928233Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 20:31:00.937601 waagent[1513]: 2023-10-02T20:31:00.937497Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 20:31:00.937982 waagent[1513]: 2023-10-02T20:31:00.937926Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:31:00.938153 waagent[1513]: 2023-10-02T20:31:00.938105Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:31:00.949686 waagent[1513]: 2023-10-02T20:31:00.949609Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 20:31:00.958488 waagent[1513]: 2023-10-02T20:31:00.958427Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 20:31:00.959395 waagent[1513]: 2023-10-02T20:31:00.959336Z INFO ExtHandler Oct 2 20:31:00.959544 waagent[1513]: 2023-10-02T20:31:00.959493Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 486fd4f7-a43a-42e7-a8af-08648ddf8976 eTag: 1163519873291784011 source: Fabric] Oct 2 20:31:00.960237 waagent[1513]: 2023-10-02T20:31:00.960181Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 20:31:00.961303 waagent[1513]: 2023-10-02T20:31:00.961243Z INFO ExtHandler Oct 2 20:31:00.961433 waagent[1513]: 2023-10-02T20:31:00.961382Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 20:31:00.968282 waagent[1513]: 2023-10-02T20:31:00.968233Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 20:31:00.968702 waagent[1513]: 2023-10-02T20:31:00.968655Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 20:31:01.378928 waagent[1513]: 2023-10-02T20:31:01.378830Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 20:31:01.451580 waagent[1513]: 2023-10-02T20:31:01.451444Z INFO ExtHandler Downloaded certificate {'thumbprint': 'DEED6E241AC538C1D56D3AD881E265DB501F3219', 'hasPrivateKey': True} Oct 2 20:31:01.452600 waagent[1513]: 2023-10-02T20:31:01.452533Z INFO ExtHandler Downloaded certificate {'thumbprint': '2E7031982AD505D4022B58AF3FA6B23635A35956', 'hasPrivateKey': False} Oct 2 20:31:01.453596 waagent[1513]: 2023-10-02T20:31:01.453534Z INFO ExtHandler Fetch goal state completed Oct 2 20:31:01.474620 waagent[1513]: 2023-10-02T20:31:01.474532Z INFO ExtHandler ExtHandler WALinuxAgent-2.10.0.3 running as process 1513 Oct 2 20:31:01.477956 waagent[1513]: 2023-10-02T20:31:01.477882Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 20:31:01.479473 waagent[1513]: 2023-10-02T20:31:01.479414Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 20:31:01.484392 waagent[1513]: 2023-10-02T20:31:01.484337Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 20:31:01.484756 waagent[1513]: 2023-10-02T20:31:01.484702Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 20:31:01.492556 waagent[1513]: 2023-10-02T20:31:01.492500Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 20:31:01.493022 waagent[1513]: 2023-10-02T20:31:01.492955Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 20:31:01.514418 waagent[1513]: 2023-10-02T20:31:01.514293Z INFO ExtHandler ExtHandler Firewall rule to allow DNS TCP request to wireserver for a non root user unavailable. Setting it now. Oct 2 20:31:01.517340 waagent[1513]: 2023-10-02T20:31:01.517236Z INFO ExtHandler ExtHandler Succesfully added firewall rule to allow non root users to do a DNS TCP request to wireserver Oct 2 20:31:01.522738 waagent[1513]: 2023-10-02T20:31:01.522677Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 20:31:01.524168 waagent[1513]: 2023-10-02T20:31:01.524110Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 20:31:01.524407 waagent[1513]: 2023-10-02T20:31:01.524351Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:31:01.524872 waagent[1513]: 2023-10-02T20:31:01.524818Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:31:01.525422 waagent[1513]: 2023-10-02T20:31:01.525364Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 20:31:01.525699 waagent[1513]: 2023-10-02T20:31:01.525642Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 20:31:01.525699 waagent[1513]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 20:31:01.525699 waagent[1513]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 20:31:01.525699 waagent[1513]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 20:31:01.525699 waagent[1513]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:31:01.525699 waagent[1513]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:31:01.525699 waagent[1513]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:31:01.529142 waagent[1513]: 2023-10-02T20:31:01.529018Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 20:31:01.529266 waagent[1513]: 2023-10-02T20:31:01.529202Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:31:01.529627 waagent[1513]: 2023-10-02T20:31:01.529577Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:31:01.530252 waagent[1513]: 2023-10-02T20:31:01.530195Z INFO EnvHandler ExtHandler Configure routes Oct 2 20:31:01.531289 waagent[1513]: 2023-10-02T20:31:01.531235Z INFO EnvHandler ExtHandler Gateway:None Oct 2 20:31:01.531426 waagent[1513]: 2023-10-02T20:31:01.531378Z INFO EnvHandler ExtHandler Routes:None Oct 2 20:31:01.536223 waagent[1513]: 2023-10-02T20:31:01.536102Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 20:31:01.536649 waagent[1513]: 2023-10-02T20:31:01.536406Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 20:31:01.537769 waagent[1513]: 2023-10-02T20:31:01.537588Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 20:31:01.539844 waagent[1513]: 2023-10-02T20:31:01.539565Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 20:31:01.542905 waagent[1513]: 2023-10-02T20:31:01.542838Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 20:31:01.557698 waagent[1513]: 2023-10-02T20:31:01.557605Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 20:31:01.557698 waagent[1513]: Executing ['ip', '-a', '-o', 'link']: Oct 2 20:31:01.557698 waagent[1513]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 20:31:01.557698 waagent[1513]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b4:fc:45 brd ff:ff:ff:ff:ff:ff Oct 2 20:31:01.557698 waagent[1513]: 3: enP62319s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b4:fc:45 brd ff:ff:ff:ff:ff:ff\ altname enP62319p0s2 Oct 2 20:31:01.557698 waagent[1513]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 20:31:01.557698 waagent[1513]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 20:31:01.557698 waagent[1513]: 2: eth0 inet 10.200.8.16/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 20:31:01.557698 waagent[1513]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 20:31:01.557698 waagent[1513]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 20:31:01.557698 waagent[1513]: 2: eth0 inet6 fe80::20d:3aff:feb4:fc45/64 scope link \ valid_lft forever preferred_lft forever Oct 2 20:31:01.661423 waagent[1513]: 2023-10-02T20:31:01.661286Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 20:31:01.661423 waagent[1513]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:31:01.661423 waagent[1513]: pkts bytes target prot opt in out source destination Oct 2 20:31:01.661423 waagent[1513]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:31:01.661423 waagent[1513]: pkts bytes target prot opt in out source destination Oct 2 20:31:01.661423 waagent[1513]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:31:01.661423 waagent[1513]: pkts bytes target prot opt in out source destination Oct 2 20:31:01.661423 waagent[1513]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 20:31:01.661423 waagent[1513]: 138 15039 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 20:31:01.661423 waagent[1513]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 20:31:01.972613 waagent[1513]: 2023-10-02T20:31:01.972443Z INFO ExtHandler ExtHandler Downloading agent manifest Oct 2 20:31:02.022040 waagent[1513]: 2023-10-02T20:31:02.021938Z INFO ExtHandler ExtHandler Oct 2 20:31:02.022243 waagent[1513]: 2023-10-02T20:31:02.022180Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 5bd5e487-96e4-4560-bbc4-73f719e001e5 correlation ee4f5c4e-6158-4ff4-bf20-2d0a464aaa01 created: 2023-10-02T20:29:28.102577Z] Oct 2 20:31:02.023084 waagent[1513]: 2023-10-02T20:31:02.023027Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 20:31:02.024911 waagent[1513]: 2023-10-02T20:31:02.024855Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 2 ms] Oct 2 20:31:02.046808 waagent[1513]: 2023-10-02T20:31:02.046725Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 20:31:02.056560 waagent[1513]: 2023-10-02T20:31:02.056478Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.10.0.3 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 4E264F78-54F8-4EF2-BD66-482A9F0EA3B9;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 20:31:28.076393 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Oct 2 20:31:34.922233 update_engine[1311]: I1002 20:31:34.922150 1311 update_attempter.cc:505] Updating boot flags... Oct 2 20:31:35.353661 systemd[1]: Created slice system-sshd.slice. Oct 2 20:31:35.355224 systemd[1]: Started sshd@0-10.200.8.16:22-10.200.12.6:38474.service. Oct 2 20:31:36.309889 sshd[1618]: Accepted publickey for core from 10.200.12.6 port 38474 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:31:36.311492 sshd[1618]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:31:36.316085 systemd-logind[1309]: New session 3 of user core. Oct 2 20:31:36.316631 systemd[1]: Started session-3.scope. Oct 2 20:31:36.899243 systemd[1]: Started sshd@1-10.200.8.16:22-10.200.12.6:38488.service. Oct 2 20:31:37.659494 sshd[1623]: Accepted publickey for core from 10.200.12.6 port 38488 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:31:37.661114 sshd[1623]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:31:37.666040 systemd[1]: Started session-4.scope. Oct 2 20:31:37.666626 systemd-logind[1309]: New session 4 of user core. Oct 2 20:31:38.286133 sshd[1623]: pam_unix(sshd:session): session closed for user core Oct 2 20:31:38.289335 systemd[1]: sshd@1-10.200.8.16:22-10.200.12.6:38488.service: Deactivated successfully. Oct 2 20:31:38.290244 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 20:31:38.290829 systemd-logind[1309]: Session 4 logged out. Waiting for processes to exit. Oct 2 20:31:38.291656 systemd-logind[1309]: Removed session 4. Oct 2 20:31:38.404388 systemd[1]: Started sshd@2-10.200.8.16:22-10.200.12.6:52938.service. Oct 2 20:31:39.268877 sshd[1629]: Accepted publickey for core from 10.200.12.6 port 52938 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:31:39.270494 sshd[1629]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:31:39.275620 systemd[1]: Started session-5.scope. Oct 2 20:31:39.276085 systemd-logind[1309]: New session 5 of user core. Oct 2 20:31:40.215061 sshd[1629]: pam_unix(sshd:session): session closed for user core Oct 2 20:31:40.218237 systemd[1]: sshd@2-10.200.8.16:22-10.200.12.6:52938.service: Deactivated successfully. Oct 2 20:31:40.219242 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 20:31:40.220043 systemd-logind[1309]: Session 5 logged out. Waiting for processes to exit. Oct 2 20:31:40.220941 systemd-logind[1309]: Removed session 5. Oct 2 20:31:40.420459 systemd[1]: Started sshd@3-10.200.8.16:22-10.200.12.6:52948.service. Oct 2 20:31:41.535724 sshd[1638]: Accepted publickey for core from 10.200.12.6 port 52948 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:31:41.537353 sshd[1638]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:31:41.542178 systemd[1]: Started session-6.scope. Oct 2 20:31:41.542863 systemd-logind[1309]: New session 6 of user core. Oct 2 20:31:41.983512 sshd[1638]: pam_unix(sshd:session): session closed for user core Oct 2 20:31:41.987066 systemd[1]: sshd@3-10.200.8.16:22-10.200.12.6:52948.service: Deactivated successfully. Oct 2 20:31:41.987956 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 20:31:41.988698 systemd-logind[1309]: Session 6 logged out. Waiting for processes to exit. Oct 2 20:31:41.989484 systemd-logind[1309]: Removed session 6. Oct 2 20:31:42.246976 systemd[1]: Started sshd@4-10.200.8.16:22-10.200.12.6:52960.service. Oct 2 20:31:42.988559 sshd[1644]: Accepted publickey for core from 10.200.12.6 port 52960 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:31:42.990163 sshd[1644]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:31:42.995055 systemd-logind[1309]: New session 7 of user core. Oct 2 20:31:42.995570 systemd[1]: Started session-7.scope. Oct 2 20:31:43.583575 sudo[1647]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 20:31:43.583916 sudo[1647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:31:43.605223 dbus-daemon[1296]: \xd0\xddح\x81U: received setenforce notice (enforcing=-1918161904) Oct 2 20:31:43.607030 sudo[1647]: pam_unix(sudo:session): session closed for user root Oct 2 20:31:43.719593 sshd[1644]: pam_unix(sshd:session): session closed for user core Oct 2 20:31:43.723140 systemd[1]: sshd@4-10.200.8.16:22-10.200.12.6:52960.service: Deactivated successfully. Oct 2 20:31:43.724085 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 20:31:43.724691 systemd-logind[1309]: Session 7 logged out. Waiting for processes to exit. Oct 2 20:31:43.725497 systemd-logind[1309]: Removed session 7. Oct 2 20:31:43.824078 systemd[1]: Started sshd@5-10.200.8.16:22-10.200.12.6:52970.service. Oct 2 20:31:44.451826 sshd[1651]: Accepted publickey for core from 10.200.12.6 port 52970 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:31:44.453488 sshd[1651]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:31:44.459021 systemd[1]: Started session-8.scope. Oct 2 20:31:44.459708 systemd-logind[1309]: New session 8 of user core. Oct 2 20:31:44.901836 sudo[1655]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 20:31:44.902185 sudo[1655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:31:44.904961 sudo[1655]: pam_unix(sudo:session): session closed for user root Oct 2 20:31:44.909579 sudo[1654]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 20:31:44.909840 sudo[1654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:31:44.918721 systemd[1]: Stopping audit-rules.service... Oct 2 20:31:44.918000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:31:44.920336 auditctl[1658]: No rules Oct 2 20:31:44.923189 kernel: kauditd_printk_skb: 4 callbacks suppressed Oct 2 20:31:44.923265 kernel: audit: type=1305 audit(1696278704.918:165): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:31:44.920757 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 20:31:44.920914 systemd[1]: Stopped audit-rules.service. Oct 2 20:31:44.923828 systemd[1]: Starting audit-rules.service... Oct 2 20:31:44.918000 audit[1658]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe566312d0 a2=420 a3=0 items=0 ppid=1 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:44.945153 augenrules[1675]: No rules Oct 2 20:31:44.918000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:31:44.945989 systemd[1]: Finished audit-rules.service. Oct 2 20:31:44.947019 sudo[1654]: pam_unix(sudo:session): session closed for user root Oct 2 20:31:44.952167 kernel: audit: type=1300 audit(1696278704.918:165): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe566312d0 a2=420 a3=0 items=0 ppid=1 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:44.952248 kernel: audit: type=1327 audit(1696278704.918:165): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:31:44.952275 kernel: audit: type=1131 audit(1696278704.919:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.974348 kernel: audit: type=1130 audit(1696278704.945:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.975028 kernel: audit: type=1106 audit(1696278704.946:168): pid=1654 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.946000 audit[1654]: USER_END pid=1654 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.946000 audit[1654]: CRED_DISP pid=1654 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.998405 kernel: audit: type=1104 audit(1696278704.946:169): pid=1654 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:31:45.048318 sshd[1651]: pam_unix(sshd:session): session closed for user core Oct 2 20:31:45.048000 audit[1651]: USER_END pid=1651 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:31:45.052029 systemd[1]: sshd@5-10.200.8.16:22-10.200.12.6:52970.service: Deactivated successfully. Oct 2 20:31:45.052892 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 20:31:45.054409 systemd-logind[1309]: Session 8 logged out. Waiting for processes to exit. Oct 2 20:31:45.055544 systemd-logind[1309]: Removed session 8. Oct 2 20:31:45.048000 audit[1651]: CRED_DISP pid=1651 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:31:45.077941 kernel: audit: type=1106 audit(1696278705.048:170): pid=1651 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:31:45.078030 kernel: audit: type=1104 audit(1696278705.048:171): pid=1651 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:31:45.078066 kernel: audit: type=1131 audit(1696278705.048:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.16:22-10.200.12.6:52970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:45.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.16:22-10.200.12.6:52970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:45.158863 systemd[1]: Started sshd@6-10.200.8.16:22-10.200.12.6:52986.service. Oct 2 20:31:45.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.16:22-10.200.12.6:52986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:45.902000 audit[1681]: USER_ACCT pid=1681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:31:45.903477 sshd[1681]: Accepted publickey for core from 10.200.12.6 port 52986 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:31:45.903000 audit[1681]: CRED_ACQ pid=1681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:31:45.903000 audit[1681]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcaf6a3df0 a2=3 a3=0 items=0 ppid=1 pid=1681 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:45.903000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:31:45.905144 sshd[1681]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:31:45.909985 systemd[1]: Started session-9.scope. Oct 2 20:31:45.910441 systemd-logind[1309]: New session 9 of user core. Oct 2 20:31:45.913000 audit[1681]: USER_START pid=1681 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:31:45.915000 audit[1683]: CRED_ACQ pid=1683 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:31:46.314000 audit[1684]: USER_ACCT pid=1684 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:31:46.314000 audit[1684]: CRED_REFR pid=1684 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:31:46.315500 sudo[1684]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 20:31:46.315760 sudo[1684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:31:46.316000 audit[1684]: USER_START pid=1684 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:31:47.230816 systemd[1]: Starting docker.service... Oct 2 20:31:47.266357 env[1699]: time="2023-10-02T20:31:47.266293072Z" level=info msg="Starting up" Oct 2 20:31:47.268628 env[1699]: time="2023-10-02T20:31:47.268589970Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:31:47.268628 env[1699]: time="2023-10-02T20:31:47.268611770Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:31:47.268795 env[1699]: time="2023-10-02T20:31:47.268631670Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:31:47.268795 env[1699]: time="2023-10-02T20:31:47.268695070Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:31:47.270479 env[1699]: time="2023-10-02T20:31:47.270447268Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:31:47.270479 env[1699]: time="2023-10-02T20:31:47.270468668Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:31:47.270626 env[1699]: time="2023-10-02T20:31:47.270487968Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:31:47.270626 env[1699]: time="2023-10-02T20:31:47.270499668Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:31:47.276566 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3792450295-merged.mount: Deactivated successfully. Oct 2 20:31:47.397321 env[1699]: time="2023-10-02T20:31:47.397270469Z" level=info msg="Loading containers: start." Oct 2 20:31:47.429000 audit[1727]: NETFILTER_CFG table=nat:6 family=2 entries=2 op=nft_register_chain pid=1727 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.429000 audit[1727]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffe4ede3630 a2=0 a3=7ffe4ede361c items=0 ppid=1699 pid=1727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.429000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 20:31:47.431000 audit[1729]: NETFILTER_CFG table=filter:7 family=2 entries=2 op=nft_register_chain pid=1729 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.431000 audit[1729]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff664b4170 a2=0 a3=7fff664b415c items=0 ppid=1699 pid=1729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.431000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 20:31:47.433000 audit[1731]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1731 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.433000 audit[1731]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd53f3ba40 a2=0 a3=7ffd53f3ba2c items=0 ppid=1699 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.433000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:31:47.434000 audit[1733]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=1733 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.434000 audit[1733]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd87897160 a2=0 a3=7ffd8789714c items=0 ppid=1699 pid=1733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.434000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:31:47.436000 audit[1735]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1735 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.436000 audit[1735]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffeeabe850 a2=0 a3=7fffeeabe83c items=0 ppid=1699 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.436000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 20:31:47.438000 audit[1737]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_rule pid=1737 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.438000 audit[1737]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcc6493bb0 a2=0 a3=7ffcc6493b9c items=0 ppid=1699 pid=1737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.438000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 20:31:47.457000 audit[1739]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_chain pid=1739 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.457000 audit[1739]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc41dc5150 a2=0 a3=7ffc41dc513c items=0 ppid=1699 pid=1739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.457000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 20:31:47.459000 audit[1741]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1741 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.459000 audit[1741]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffcc04d6640 a2=0 a3=7ffcc04d662c items=0 ppid=1699 pid=1741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.459000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 20:31:47.461000 audit[1743]: NETFILTER_CFG table=filter:14 family=2 entries=2 op=nft_register_chain pid=1743 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.461000 audit[1743]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffd4fa6f3c0 a2=0 a3=7ffd4fa6f3ac items=0 ppid=1699 pid=1743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.461000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:31:47.477000 audit[1747]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_unregister_rule pid=1747 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.477000 audit[1747]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffd9913cd0 a2=0 a3=7fffd9913cbc items=0 ppid=1699 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.477000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:31:47.478000 audit[1748]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1748 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.478000 audit[1748]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe45307980 a2=0 a3=7ffe4530796c items=0 ppid=1699 pid=1748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.478000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:31:47.515025 kernel: Initializing XFRM netlink socket Oct 2 20:31:47.548463 env[1699]: time="2023-10-02T20:31:47.548413251Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 20:31:47.630000 audit[1756]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1756 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.630000 audit[1756]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffdc2b5ef60 a2=0 a3=7ffdc2b5ef4c items=0 ppid=1699 pid=1756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.630000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 20:31:47.650000 audit[1759]: NETFILTER_CFG table=nat:18 family=2 entries=1 op=nft_register_rule pid=1759 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.650000 audit[1759]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffed5056110 a2=0 a3=7ffed50560fc items=0 ppid=1699 pid=1759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.650000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 20:31:47.653000 audit[1762]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1762 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.653000 audit[1762]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe95c87960 a2=0 a3=7ffe95c8794c items=0 ppid=1699 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.653000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 20:31:47.655000 audit[1764]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1764 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.655000 audit[1764]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffeaf8f2890 a2=0 a3=7ffeaf8f287c items=0 ppid=1699 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.655000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 20:31:47.657000 audit[1766]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1766 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.657000 audit[1766]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffcbcfa8630 a2=0 a3=7ffcbcfa861c items=0 ppid=1699 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.657000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 20:31:47.659000 audit[1768]: NETFILTER_CFG table=nat:22 family=2 entries=2 op=nft_register_chain pid=1768 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.659000 audit[1768]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffdc600fb80 a2=0 a3=7ffdc600fb6c items=0 ppid=1699 pid=1768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.659000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 20:31:47.660000 audit[1770]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1770 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.660000 audit[1770]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffc8a60ab20 a2=0 a3=7ffc8a60ab0c items=0 ppid=1699 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.660000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 20:31:47.662000 audit[1772]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1772 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.662000 audit[1772]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffefb5d2ba0 a2=0 a3=7ffefb5d2b8c items=0 ppid=1699 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.662000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 20:31:47.664000 audit[1774]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1774 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.664000 audit[1774]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffd3ec92820 a2=0 a3=7ffd3ec9280c items=0 ppid=1699 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.664000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:31:47.666000 audit[1776]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1776 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.666000 audit[1776]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffc3f184520 a2=0 a3=7ffc3f18450c items=0 ppid=1699 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.666000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:31:47.668000 audit[1778]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1778 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.668000 audit[1778]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff788f1540 a2=0 a3=7fff788f152c items=0 ppid=1699 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.668000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 20:31:47.670193 systemd-networkd[1461]: docker0: Link UP Oct 2 20:31:47.691000 audit[1782]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_unregister_rule pid=1782 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.691000 audit[1782]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc73da8290 a2=0 a3=7ffc73da827c items=0 ppid=1699 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.691000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:31:47.692000 audit[1783]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1783 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.692000 audit[1783]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffa7b55350 a2=0 a3=7fffa7b5533c items=0 ppid=1699 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.692000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:31:47.693910 env[1699]: time="2023-10-02T20:31:47.693871537Z" level=info msg="Loading containers: done." Oct 2 20:31:47.721082 env[1699]: time="2023-10-02T20:31:47.721035316Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 20:31:47.721292 env[1699]: time="2023-10-02T20:31:47.721268615Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 20:31:47.721407 env[1699]: time="2023-10-02T20:31:47.721385815Z" level=info msg="Daemon has completed initialization" Oct 2 20:31:47.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:47.765355 systemd[1]: Started docker.service. Oct 2 20:31:47.774428 env[1699]: time="2023-10-02T20:31:47.774372274Z" level=info msg="API listen on /run/docker.sock" Oct 2 20:31:47.791352 systemd[1]: Reloading. Oct 2 20:31:47.878452 /usr/lib/systemd/system-generators/torcx-generator[1829]: time="2023-10-02T20:31:47Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:31:47.878492 /usr/lib/systemd/system-generators/torcx-generator[1829]: time="2023-10-02T20:31:47Z" level=info msg="torcx already run" Oct 2 20:31:47.962499 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:31:47.962524 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:31:47.980651 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit: BPF prog-id=32 op=LOAD Oct 2 20:31:48.046000 audit: BPF prog-id=15 op=UNLOAD Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.047000 audit: BPF prog-id=33 op=LOAD Oct 2 20:31:48.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.047000 audit: BPF prog-id=34 op=LOAD Oct 2 20:31:48.047000 audit: BPF prog-id=16 op=UNLOAD Oct 2 20:31:48.047000 audit: BPF prog-id=17 op=UNLOAD Oct 2 20:31:48.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.048000 audit: BPF prog-id=35 op=LOAD Oct 2 20:31:48.048000 audit: BPF prog-id=25 op=UNLOAD Oct 2 20:31:48.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.049000 audit: BPF prog-id=36 op=LOAD Oct 2 20:31:48.049000 audit: BPF prog-id=24 op=UNLOAD Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit: BPF prog-id=37 op=LOAD Oct 2 20:31:48.050000 audit: BPF prog-id=21 op=UNLOAD Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit: BPF prog-id=38 op=LOAD Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.050000 audit: BPF prog-id=39 op=LOAD Oct 2 20:31:48.050000 audit: BPF prog-id=22 op=UNLOAD Oct 2 20:31:48.050000 audit: BPF prog-id=23 op=UNLOAD Oct 2 20:31:48.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit: BPF prog-id=40 op=LOAD Oct 2 20:31:48.052000 audit: BPF prog-id=26 op=UNLOAD Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit: BPF prog-id=41 op=LOAD Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.052000 audit: BPF prog-id=42 op=LOAD Oct 2 20:31:48.052000 audit: BPF prog-id=27 op=UNLOAD Oct 2 20:31:48.052000 audit: BPF prog-id=28 op=UNLOAD Oct 2 20:31:48.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.055000 audit: BPF prog-id=43 op=LOAD Oct 2 20:31:48.055000 audit: BPF prog-id=31 op=UNLOAD Oct 2 20:31:48.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.055000 audit: BPF prog-id=44 op=LOAD Oct 2 20:31:48.056000 audit: BPF prog-id=29 op=UNLOAD Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit: BPF prog-id=45 op=LOAD Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:48.056000 audit: BPF prog-id=46 op=LOAD Oct 2 20:31:48.056000 audit: BPF prog-id=18 op=UNLOAD Oct 2 20:31:48.056000 audit: BPF prog-id=19 op=UNLOAD Oct 2 20:31:48.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:48.070039 systemd[1]: Started kubelet.service. Oct 2 20:31:48.143230 kubelet[1890]: E1002 20:31:48.143163 1890 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 20:31:48.145059 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:31:48.145224 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:31:48.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:31:51.365512 env[1325]: time="2023-10-02T20:31:51.365468980Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\"" Oct 2 20:31:52.246637 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3628284366.mount: Deactivated successfully. Oct 2 20:31:54.301819 env[1325]: time="2023-10-02T20:31:54.301758200Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:54.308118 env[1325]: time="2023-10-02T20:31:54.308063125Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cdcab12b2dd16cce4efc5dd43c082469364f19ad978e922d110b74a42eff7cce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:54.312031 env[1325]: time="2023-10-02T20:31:54.311978965Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:54.315803 env[1325]: time="2023-10-02T20:31:54.315762901Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6beea2e5531a0606613594fd3ed92d71bbdcef99dd3237522049a0b32cad736c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:54.316484 env[1325]: time="2023-10-02T20:31:54.316448625Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\" returns image reference \"sha256:cdcab12b2dd16cce4efc5dd43c082469364f19ad978e922d110b74a42eff7cce\"" Oct 2 20:31:54.326936 env[1325]: time="2023-10-02T20:31:54.326892898Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\"" Oct 2 20:31:56.468892 env[1325]: time="2023-10-02T20:31:56.468827781Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:56.475888 env[1325]: time="2023-10-02T20:31:56.475833618Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:55f13c92defb1eb854040a76e366da866bdcb1cc31fd97b2cde94433c8bf3f57,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:56.481643 env[1325]: time="2023-10-02T20:31:56.481591813Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:56.486763 env[1325]: time="2023-10-02T20:31:56.486718986Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6a42ce14d716205a99763f3c732c0a8f0ea041bdbbea7d2dfffcc53dafd7cac4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:56.487354 env[1325]: time="2023-10-02T20:31:56.487320307Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\" returns image reference \"sha256:55f13c92defb1eb854040a76e366da866bdcb1cc31fd97b2cde94433c8bf3f57\"" Oct 2 20:31:56.502686 env[1325]: time="2023-10-02T20:31:56.502645525Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\"" Oct 2 20:31:57.871076 env[1325]: time="2023-10-02T20:31:57.871014412Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:57.879891 env[1325]: time="2023-10-02T20:31:57.879839102Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7a5d9d67a13f6ae031989bc2969ec55b06437725f397e6eb75b1dccac465a7b8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:57.885105 env[1325]: time="2023-10-02T20:31:57.885062174Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:57.896346 env[1325]: time="2023-10-02T20:31:57.896296043Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6511193f8114a2f011790619698efe12a8119ed9a17e2e36f4c1c759ccf173ab,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:57.897078 env[1325]: time="2023-10-02T20:31:57.897041868Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\" returns image reference \"sha256:7a5d9d67a13f6ae031989bc2969ec55b06437725f397e6eb75b1dccac465a7b8\"" Oct 2 20:31:57.907289 env[1325]: time="2023-10-02T20:31:57.907252504Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\"" Oct 2 20:31:58.243390 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 20:31:58.251672 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 20:31:58.251770 kernel: audit: type=1130 audit(1696278718.242:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:58.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:58.243702 systemd[1]: Stopped kubelet.service. Oct 2 20:31:58.245674 systemd[1]: Started kubelet.service. Oct 2 20:31:58.242000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:58.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:58.286417 kernel: audit: type=1131 audit(1696278718.242:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:58.286563 kernel: audit: type=1130 audit(1696278718.244:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:58.310426 kubelet[1924]: E1002 20:31:58.310368 1924 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 20:31:58.313622 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:31:58.313783 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:31:58.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:31:58.328130 kernel: audit: type=1131 audit(1696278718.314:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:31:58.978057 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount467763272.mount: Deactivated successfully. Oct 2 20:31:59.557783 env[1325]: time="2023-10-02T20:31:59.557727770Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:59.564582 env[1325]: time="2023-10-02T20:31:59.564532882Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c120fed2beb84b861c2382ce81ab046c0ae612e91264ef7c9e61df5900fa0bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:59.567948 env[1325]: time="2023-10-02T20:31:59.567911387Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:59.571517 env[1325]: time="2023-10-02T20:31:59.571484898Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:41c8f92d1cd571e0e36af431f35c78379f84f5daf5b85d43014a9940d697afcf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:59.571826 env[1325]: time="2023-10-02T20:31:59.571793908Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\" returns image reference \"sha256:c120fed2beb84b861c2382ce81ab046c0ae612e91264ef7c9e61df5900fa0bb0\"" Oct 2 20:31:59.581886 env[1325]: time="2023-10-02T20:31:59.581847721Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 20:32:00.167227 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount835840140.mount: Deactivated successfully. Oct 2 20:32:00.195747 env[1325]: time="2023-10-02T20:32:00.195693690Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:00.202208 env[1325]: time="2023-10-02T20:32:00.202161786Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:00.206072 env[1325]: time="2023-10-02T20:32:00.206033804Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:00.210927 env[1325]: time="2023-10-02T20:32:00.210890651Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:00.211396 env[1325]: time="2023-10-02T20:32:00.211364065Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 20:32:00.221414 env[1325]: time="2023-10-02T20:32:00.221381669Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Oct 2 20:32:05.280960 env[1325]: time="2023-10-02T20:32:05.280898282Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:05.289694 env[1325]: time="2023-10-02T20:32:05.289641414Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:05.293859 env[1325]: time="2023-10-02T20:32:05.293814525Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:05.299721 env[1325]: time="2023-10-02T20:32:05.299669281Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:05.300412 env[1325]: time="2023-10-02T20:32:05.300375199Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9\"" Oct 2 20:32:05.311135 env[1325]: time="2023-10-02T20:32:05.311094084Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 20:32:05.857208 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount95259318.mount: Deactivated successfully. Oct 2 20:32:06.485092 env[1325]: time="2023-10-02T20:32:06.485022221Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:06.494406 env[1325]: time="2023-10-02T20:32:06.494357163Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:06.498964 env[1325]: time="2023-10-02T20:32:06.498925481Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:06.505205 env[1325]: time="2023-10-02T20:32:06.505164942Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:06.505596 env[1325]: time="2023-10-02T20:32:06.505563752Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 20:32:08.443600 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 20:32:08.443942 systemd[1]: Stopped kubelet.service. Oct 2 20:32:08.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:08.460023 kernel: audit: type=1130 audit(1696278728.442:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:08.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:08.464105 systemd[1]: Started kubelet.service. Oct 2 20:32:08.475036 kernel: audit: type=1131 audit(1696278728.442:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:08.463000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:08.490020 kernel: audit: type=1130 audit(1696278728.463:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:08.498236 systemd[1]: Stopping kubelet.service... Oct 2 20:32:08.499803 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 20:32:08.500014 systemd[1]: Stopped kubelet.service. Oct 2 20:32:08.499000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:08.515125 kernel: audit: type=1131 audit(1696278728.499:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:08.518688 systemd[1]: Reloading. Oct 2 20:32:08.598464 /usr/lib/systemd/system-generators/torcx-generator[2035]: time="2023-10-02T20:32:08Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:32:08.598503 /usr/lib/systemd/system-generators/torcx-generator[2035]: time="2023-10-02T20:32:08Z" level=info msg="torcx already run" Oct 2 20:32:08.689460 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:32:08.689480 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:32:08.707525 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:32:08.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.793018 kernel: audit: type=1400 audit(1696278728.778:389): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.808017 kernel: audit: type=1400 audit(1696278728.778:390): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.808094 kernel: audit: type=1400 audit(1696278728.778:391): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.835538 kernel: audit: type=1400 audit(1696278728.778:392): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.835632 kernel: audit: type=1400 audit(1696278728.778:393): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.863204 kernel: audit: type=1400 audit(1696278728.778:394): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.778000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.778000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit: BPF prog-id=47 op=LOAD Oct 2 20:32:08.791000 audit: BPF prog-id=32 op=UNLOAD Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit: BPF prog-id=48 op=LOAD Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.791000 audit: BPF prog-id=49 op=LOAD Oct 2 20:32:08.791000 audit: BPF prog-id=33 op=UNLOAD Oct 2 20:32:08.792000 audit: BPF prog-id=34 op=UNLOAD Oct 2 20:32:08.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.806000 audit: BPF prog-id=50 op=LOAD Oct 2 20:32:08.806000 audit: BPF prog-id=35 op=UNLOAD Oct 2 20:32:08.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.820000 audit: BPF prog-id=51 op=LOAD Oct 2 20:32:08.820000 audit: BPF prog-id=36 op=UNLOAD Oct 2 20:32:08.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit: BPF prog-id=52 op=LOAD Oct 2 20:32:08.862000 audit: BPF prog-id=37 op=UNLOAD Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit: BPF prog-id=53 op=LOAD Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.862000 audit: BPF prog-id=54 op=LOAD Oct 2 20:32:08.862000 audit: BPF prog-id=38 op=UNLOAD Oct 2 20:32:08.862000 audit: BPF prog-id=39 op=UNLOAD Oct 2 20:32:08.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit: BPF prog-id=55 op=LOAD Oct 2 20:32:08.864000 audit: BPF prog-id=40 op=UNLOAD Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit: BPF prog-id=56 op=LOAD Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.864000 audit: BPF prog-id=57 op=LOAD Oct 2 20:32:08.864000 audit: BPF prog-id=41 op=UNLOAD Oct 2 20:32:08.864000 audit: BPF prog-id=42 op=UNLOAD Oct 2 20:32:08.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.867000 audit: BPF prog-id=58 op=LOAD Oct 2 20:32:08.867000 audit: BPF prog-id=43 op=UNLOAD Oct 2 20:32:08.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.867000 audit: BPF prog-id=59 op=LOAD Oct 2 20:32:08.867000 audit: BPF prog-id=44 op=UNLOAD Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit: BPF prog-id=60 op=LOAD Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:08.868000 audit: BPF prog-id=61 op=LOAD Oct 2 20:32:08.868000 audit: BPF prog-id=45 op=UNLOAD Oct 2 20:32:08.868000 audit: BPF prog-id=46 op=UNLOAD Oct 2 20:32:08.887117 systemd[1]: Started kubelet.service. Oct 2 20:32:08.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:08.933231 kubelet[2095]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:32:08.933231 kubelet[2095]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:32:08.933231 kubelet[2095]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:32:08.933714 kubelet[2095]: I1002 20:32:08.933309 2095 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:32:09.290476 kubelet[2095]: I1002 20:32:09.290437 2095 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 20:32:09.290476 kubelet[2095]: I1002 20:32:09.290466 2095 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:32:09.290775 kubelet[2095]: I1002 20:32:09.290710 2095 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 20:32:09.295556 kubelet[2095]: E1002 20:32:09.295536 2095 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.8.16:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:09.295708 kubelet[2095]: I1002 20:32:09.295633 2095 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:32:09.301361 kubelet[2095]: I1002 20:32:09.301335 2095 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:32:09.301747 kubelet[2095]: I1002 20:32:09.301732 2095 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:32:09.302180 kubelet[2095]: I1002 20:32:09.302156 2095 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 20:32:09.302372 kubelet[2095]: I1002 20:32:09.302360 2095 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 20:32:09.302451 kubelet[2095]: I1002 20:32:09.302443 2095 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 20:32:09.302617 kubelet[2095]: I1002 20:32:09.302607 2095 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:32:09.302782 kubelet[2095]: I1002 20:32:09.302772 2095 kubelet.go:393] "Attempting to sync node with API server" Oct 2 20:32:09.302870 kubelet[2095]: I1002 20:32:09.302862 2095 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:32:09.302949 kubelet[2095]: I1002 20:32:09.302942 2095 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:32:09.303044 kubelet[2095]: I1002 20:32:09.303035 2095 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:32:09.306636 kubelet[2095]: I1002 20:32:09.306617 2095 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:32:09.307054 kubelet[2095]: W1002 20:32:09.307038 2095 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 20:32:09.307706 kubelet[2095]: I1002 20:32:09.307689 2095 server.go:1232] "Started kubelet" Oct 2 20:32:09.307938 kubelet[2095]: W1002 20:32:09.307899 2095 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.16:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:09.308057 kubelet[2095]: E1002 20:32:09.308046 2095 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.16:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:09.308229 kubelet[2095]: W1002 20:32:09.308194 2095 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.16:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-2276519d4a&limit=500&resourceVersion=0": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:09.308336 kubelet[2095]: E1002 20:32:09.308322 2095 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.16:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-2276519d4a&limit=500&resourceVersion=0": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:09.309168 kubelet[2095]: I1002 20:32:09.309149 2095 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:32:09.309691 kubelet[2095]: I1002 20:32:09.309670 2095 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:32:09.310117 kubelet[2095]: I1002 20:32:09.310102 2095 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 20:32:09.310000 audit[2095]: AVC avc: denied { mac_admin } for pid=2095 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:09.310000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:32:09.310000 audit[2095]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b194a0 a1=c0005de660 a2=c000b19470 a3=25 items=0 ppid=1 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:09.311707 kubelet[2095]: E1002 20:32:09.311634 2095 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:32:09.311707 kubelet[2095]: E1002 20:32:09.311659 2095 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:32:09.310000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:32:09.311918 kubelet[2095]: I1002 20:32:09.311906 2095 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:32:09.310000 audit[2095]: AVC avc: denied { mac_admin } for pid=2095 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:09.310000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:32:09.310000 audit[2095]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b1aae0 a1=c0005de678 a2=c000b19530 a3=25 items=0 ppid=1 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:09.310000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:32:09.312327 kubelet[2095]: I1002 20:32:09.312315 2095 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:32:09.312497 kubelet[2095]: I1002 20:32:09.312485 2095 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:32:09.313276 kubelet[2095]: I1002 20:32:09.313254 2095 server.go:462] "Adding debug handlers to kubelet server" Oct 2 20:32:09.314477 kubelet[2095]: E1002 20:32:09.311882 2095 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-2276519d4a.178a64845c6f3c66", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-2276519d4a", UID:"ci-3510.3.0-a-2276519d4a", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-2276519d4a"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 32, 9, 307667558, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 32, 9, 307667558, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510.3.0-a-2276519d4a"}': 'Post "https://10.200.8.16:6443/api/v1/namespaces/default/events": dial tcp 10.200.8.16:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:32:09.316678 kubelet[2095]: I1002 20:32:09.316191 2095 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 20:32:09.316678 kubelet[2095]: I1002 20:32:09.316492 2095 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:32:09.316678 kubelet[2095]: I1002 20:32:09.316545 2095 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 20:32:09.316922 kubelet[2095]: W1002 20:32:09.316887 2095 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.16:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:09.316986 kubelet[2095]: E1002 20:32:09.316941 2095 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.16:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:09.317593 kubelet[2095]: E1002 20:32:09.317517 2095 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.16:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-2276519d4a?timeout=10s\": dial tcp 10.200.8.16:6443: connect: connection refused" interval="200ms" Oct 2 20:32:09.318000 audit[2105]: NETFILTER_CFG table=mangle:30 family=2 entries=2 op=nft_register_chain pid=2105 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:09.318000 audit[2105]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd62130b50 a2=0 a3=7ffd62130b3c items=0 ppid=2095 pid=2105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:09.318000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:32:09.319000 audit[2106]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_chain pid=2106 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:09.319000 audit[2106]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd748bbc90 a2=0 a3=7ffd748bbc7c items=0 ppid=2095 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:09.319000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:32:09.322000 audit[2108]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2108 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:09.322000 audit[2108]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcf6db7730 a2=0 a3=7ffcf6db771c items=0 ppid=2095 pid=2108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:09.322000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:32:09.324000 audit[2110]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=2110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:09.324000 audit[2110]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd5deda5a0 a2=0 a3=7ffd5deda58c items=0 ppid=2095 pid=2110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:09.324000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:32:09.362000 audit[2116]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=2116 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:09.362000 audit[2116]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffef0c3d420 a2=0 a3=7ffef0c3d40c items=0 ppid=2095 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:09.362000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 20:32:09.363900 kubelet[2095]: I1002 20:32:09.363872 2095 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 20:32:09.364000 audit[2119]: NETFILTER_CFG table=mangle:35 family=2 entries=1 op=nft_register_chain pid=2119 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:09.364000 audit[2119]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd77f3bc80 a2=0 a3=7ffd77f3bc6c items=0 ppid=2095 pid=2119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:09.364000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:32:09.364000 audit[2118]: NETFILTER_CFG table=mangle:36 family=10 entries=2 op=nft_register_chain pid=2118 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:09.364000 audit[2118]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc5c17ecc0 a2=0 a3=7ffc5c17ecac items=0 ppid=2095 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:09.364000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:32:09.366200 kubelet[2095]: I1002 20:32:09.366110 2095 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 20:32:09.366269 kubelet[2095]: I1002 20:32:09.366140 2095 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 20:32:09.366343 kubelet[2095]: I1002 20:32:09.366330 2095 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 20:32:09.366427 kubelet[2095]: E1002 20:32:09.366414 2095 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:32:09.367313 kubelet[2095]: W1002 20:32:09.367213 2095 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.16:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:09.367313 kubelet[2095]: E1002 20:32:09.367250 2095 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.16:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:09.367000 audit[2122]: NETFILTER_CFG table=mangle:37 family=10 entries=1 op=nft_register_chain pid=2122 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:09.367000 audit[2122]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff8d586710 a2=0 a3=7fff8d5866fc items=0 ppid=2095 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:09.367000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:32:09.367000 audit[2123]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_chain pid=2123 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:09.367000 audit[2123]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd30449ff0 a2=0 a3=7ffd30449fdc items=0 ppid=2095 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:09.367000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:32:09.368000 audit[2124]: NETFILTER_CFG table=filter:39 family=2 entries=1 op=nft_register_chain pid=2124 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:09.368000 audit[2124]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdd8b4b540 a2=0 a3=7ffdd8b4b52c items=0 ppid=2095 pid=2124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:09.368000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:32:09.369000 audit[2125]: NETFILTER_CFG table=nat:40 family=10 entries=2 op=nft_register_chain pid=2125 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:09.369000 audit[2125]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffd813a2480 a2=0 a3=7ffd813a246c items=0 ppid=2095 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:09.369000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:32:09.370000 audit[2126]: NETFILTER_CFG table=filter:41 family=10 entries=2 op=nft_register_chain pid=2126 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:09.370000 audit[2126]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc1f02aee0 a2=0 a3=7ffc1f02aecc items=0 ppid=2095 pid=2126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:09.370000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:32:09.408336 kubelet[2095]: I1002 20:32:09.408306 2095 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:32:09.408336 kubelet[2095]: I1002 20:32:09.408334 2095 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:32:09.408564 kubelet[2095]: I1002 20:32:09.408356 2095 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:32:09.413485 kubelet[2095]: I1002 20:32:09.413453 2095 policy_none.go:49] "None policy: Start" Oct 2 20:32:09.414132 kubelet[2095]: I1002 20:32:09.414109 2095 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:32:09.414247 kubelet[2095]: I1002 20:32:09.414136 2095 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:32:09.417810 kubelet[2095]: I1002 20:32:09.417788 2095 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-2276519d4a" Oct 2 20:32:09.418171 kubelet[2095]: E1002 20:32:09.418134 2095 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.16:6443/api/v1/nodes\": dial tcp 10.200.8.16:6443: connect: connection refused" node="ci-3510.3.0-a-2276519d4a" Oct 2 20:32:09.422751 systemd[1]: Created slice kubepods.slice. Oct 2 20:32:09.427052 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 20:32:09.433988 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 20:32:09.435268 kubelet[2095]: I1002 20:32:09.435237 2095 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:32:09.434000 audit[2095]: AVC avc: denied { mac_admin } for pid=2095 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:09.434000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:32:09.434000 audit[2095]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000fbc8d0 a1=c000fc8888 a2=c000fbc8a0 a3=25 items=0 ppid=1 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:09.434000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:32:09.435790 kubelet[2095]: I1002 20:32:09.435777 2095 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:32:09.437034 kubelet[2095]: I1002 20:32:09.437017 2095 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:32:09.437225 kubelet[2095]: E1002 20:32:09.437045 2095 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-2276519d4a\" not found" Oct 2 20:32:09.466799 kubelet[2095]: I1002 20:32:09.466763 2095 topology_manager.go:215] "Topology Admit Handler" podUID="f21741c406d8bb6a08bde4a515d4a7b8" podNamespace="kube-system" podName="kube-apiserver-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:09.468523 kubelet[2095]: I1002 20:32:09.468499 2095 topology_manager.go:215] "Topology Admit Handler" podUID="7d77afff9c7c56442725ad0ecf3eac36" podNamespace="kube-system" podName="kube-controller-manager-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:09.470007 kubelet[2095]: I1002 20:32:09.469961 2095 topology_manager.go:215] "Topology Admit Handler" podUID="75cfd3d1a54e950681b90a415c6165eb" podNamespace="kube-system" podName="kube-scheduler-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:09.477216 systemd[1]: Created slice kubepods-burstable-podf21741c406d8bb6a08bde4a515d4a7b8.slice. Oct 2 20:32:09.487440 systemd[1]: Created slice kubepods-burstable-pod7d77afff9c7c56442725ad0ecf3eac36.slice. Oct 2 20:32:09.491356 systemd[1]: Created slice kubepods-burstable-pod75cfd3d1a54e950681b90a415c6165eb.slice. Oct 2 20:32:09.518691 kubelet[2095]: E1002 20:32:09.518646 2095 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.16:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-2276519d4a?timeout=10s\": dial tcp 10.200.8.16:6443: connect: connection refused" interval="400ms" Oct 2 20:32:09.618460 kubelet[2095]: I1002 20:32:09.617944 2095 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f21741c406d8bb6a08bde4a515d4a7b8-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-2276519d4a\" (UID: \"f21741c406d8bb6a08bde4a515d4a7b8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:09.618460 kubelet[2095]: I1002 20:32:09.618023 2095 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f21741c406d8bb6a08bde4a515d4a7b8-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-2276519d4a\" (UID: \"f21741c406d8bb6a08bde4a515d4a7b8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:09.618460 kubelet[2095]: I1002 20:32:09.618080 2095 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f21741c406d8bb6a08bde4a515d4a7b8-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-2276519d4a\" (UID: \"f21741c406d8bb6a08bde4a515d4a7b8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:09.618460 kubelet[2095]: I1002 20:32:09.618119 2095 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7d77afff9c7c56442725ad0ecf3eac36-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-2276519d4a\" (UID: \"7d77afff9c7c56442725ad0ecf3eac36\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:09.618460 kubelet[2095]: I1002 20:32:09.618153 2095 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7d77afff9c7c56442725ad0ecf3eac36-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-2276519d4a\" (UID: \"7d77afff9c7c56442725ad0ecf3eac36\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:09.618844 kubelet[2095]: I1002 20:32:09.618202 2095 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7d77afff9c7c56442725ad0ecf3eac36-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-2276519d4a\" (UID: \"7d77afff9c7c56442725ad0ecf3eac36\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:09.618844 kubelet[2095]: I1002 20:32:09.618246 2095 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/75cfd3d1a54e950681b90a415c6165eb-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-2276519d4a\" (UID: \"75cfd3d1a54e950681b90a415c6165eb\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:09.618844 kubelet[2095]: I1002 20:32:09.618285 2095 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/7d77afff9c7c56442725ad0ecf3eac36-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-2276519d4a\" (UID: \"7d77afff9c7c56442725ad0ecf3eac36\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:09.618844 kubelet[2095]: I1002 20:32:09.618327 2095 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7d77afff9c7c56442725ad0ecf3eac36-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-2276519d4a\" (UID: \"7d77afff9c7c56442725ad0ecf3eac36\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:09.621274 kubelet[2095]: I1002 20:32:09.621234 2095 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-2276519d4a" Oct 2 20:32:09.621726 kubelet[2095]: E1002 20:32:09.621712 2095 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.16:6443/api/v1/nodes\": dial tcp 10.200.8.16:6443: connect: connection refused" node="ci-3510.3.0-a-2276519d4a" Oct 2 20:32:09.786462 env[1325]: time="2023-10-02T20:32:09.786407715Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-2276519d4a,Uid:f21741c406d8bb6a08bde4a515d4a7b8,Namespace:kube-system,Attempt:0,}" Oct 2 20:32:09.791084 env[1325]: time="2023-10-02T20:32:09.791039925Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-2276519d4a,Uid:7d77afff9c7c56442725ad0ecf3eac36,Namespace:kube-system,Attempt:0,}" Oct 2 20:32:09.794718 env[1325]: time="2023-10-02T20:32:09.794581810Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-2276519d4a,Uid:75cfd3d1a54e950681b90a415c6165eb,Namespace:kube-system,Attempt:0,}" Oct 2 20:32:09.919965 kubelet[2095]: E1002 20:32:09.919875 2095 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.16:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-2276519d4a?timeout=10s\": dial tcp 10.200.8.16:6443: connect: connection refused" interval="800ms" Oct 2 20:32:10.024385 kubelet[2095]: I1002 20:32:10.024350 2095 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-2276519d4a" Oct 2 20:32:10.024876 kubelet[2095]: E1002 20:32:10.024800 2095 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.16:6443/api/v1/nodes\": dial tcp 10.200.8.16:6443: connect: connection refused" node="ci-3510.3.0-a-2276519d4a" Oct 2 20:32:10.219416 kubelet[2095]: W1002 20:32:10.219289 2095 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.16:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:10.219416 kubelet[2095]: E1002 20:32:10.219336 2095 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.16:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:10.414128 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1627155429.mount: Deactivated successfully. Oct 2 20:32:10.467982 env[1325]: time="2023-10-02T20:32:10.467913846Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:10.486481 env[1325]: time="2023-10-02T20:32:10.486156271Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:10.490668 env[1325]: time="2023-10-02T20:32:10.490621876Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:10.495764 env[1325]: time="2023-10-02T20:32:10.495722295Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:10.505227 env[1325]: time="2023-10-02T20:32:10.505177915Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:10.532841 env[1325]: time="2023-10-02T20:32:10.532771759Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:10.537739 env[1325]: time="2023-10-02T20:32:10.537692273Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:10.540287 env[1325]: time="2023-10-02T20:32:10.540249333Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:10.541624 kubelet[2095]: W1002 20:32:10.541593 2095 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.16:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:10.541725 kubelet[2095]: E1002 20:32:10.541633 2095 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.16:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:10.547187 env[1325]: time="2023-10-02T20:32:10.547153694Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:10.554835 env[1325]: time="2023-10-02T20:32:10.554799273Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:10.562889 env[1325]: time="2023-10-02T20:32:10.562847260Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:10.580441 env[1325]: time="2023-10-02T20:32:10.580391769Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:10.597523 env[1325]: time="2023-10-02T20:32:10.597454367Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:32:10.597702 env[1325]: time="2023-10-02T20:32:10.597507769Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:32:10.597702 env[1325]: time="2023-10-02T20:32:10.597522669Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:32:10.597702 env[1325]: time="2023-10-02T20:32:10.597666572Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0adff5cc96a897ad1a7586a10ff8dc3cb44c9bd36ac96144c8603050e7503e6f pid=2135 runtime=io.containerd.runc.v2 Oct 2 20:32:10.617640 systemd[1]: Started cri-containerd-0adff5cc96a897ad1a7586a10ff8dc3cb44c9bd36ac96144c8603050e7503e6f.scope. Oct 2 20:32:10.618895 kubelet[2095]: W1002 20:32:10.618154 2095 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.16:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:10.618895 kubelet[2095]: E1002 20:32:10.618194 2095 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.16:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:10.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.655000 audit: BPF prog-id=62 op=LOAD Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { bpf } for pid=2144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2135 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061646666356363393661383937616431613735383661313066663864 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { perfmon } for pid=2144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2135 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061646666356363393661383937616431613735383661313066663864 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { bpf } for pid=2144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { bpf } for pid=2144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { bpf } for pid=2144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { perfmon } for pid=2144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { perfmon } for pid=2144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { perfmon } for pid=2144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { perfmon } for pid=2144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { perfmon } for pid=2144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { bpf } for pid=2144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { bpf } for pid=2144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit: BPF prog-id=63 op=LOAD Oct 2 20:32:10.656000 audit[2144]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00029d010 items=0 ppid=2135 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061646666356363393661383937616431613735383661313066663864 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { bpf } for pid=2144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { bpf } for pid=2144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { perfmon } for pid=2144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { perfmon } for pid=2144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { perfmon } for pid=2144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { perfmon } for pid=2144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { perfmon } for pid=2144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { bpf } for pid=2144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { bpf } for pid=2144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit: BPF prog-id=64 op=LOAD Oct 2 20:32:10.656000 audit[2144]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00029d058 items=0 ppid=2135 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061646666356363393661383937616431613735383661313066663864 Oct 2 20:32:10.656000 audit: BPF prog-id=64 op=UNLOAD Oct 2 20:32:10.656000 audit: BPF prog-id=63 op=UNLOAD Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { bpf } for pid=2144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { bpf } for pid=2144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { bpf } for pid=2144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { perfmon } for pid=2144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { perfmon } for pid=2144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { perfmon } for pid=2144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { perfmon } for pid=2144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { perfmon } for pid=2144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { bpf } for pid=2144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit[2144]: AVC avc: denied { bpf } for pid=2144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.656000 audit: BPF prog-id=65 op=LOAD Oct 2 20:32:10.656000 audit[2144]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00029d468 items=0 ppid=2135 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061646666356363393661383937616431613735383661313066663864 Oct 2 20:32:10.681289 env[1325]: time="2023-10-02T20:32:10.681076018Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:32:10.681289 env[1325]: time="2023-10-02T20:32:10.681122919Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:32:10.681289 env[1325]: time="2023-10-02T20:32:10.681138619Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:32:10.681647 env[1325]: time="2023-10-02T20:32:10.681331624Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0c2901b34fb528c5bfdd1fef92d775f6e101516f1350ce883c717343fb9725b1 pid=2168 runtime=io.containerd.runc.v2 Oct 2 20:32:10.687734 env[1325]: time="2023-10-02T20:32:10.687350564Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:32:10.687734 env[1325]: time="2023-10-02T20:32:10.687600970Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:32:10.687734 env[1325]: time="2023-10-02T20:32:10.687617170Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:32:10.690109 env[1325]: time="2023-10-02T20:32:10.689841222Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3c4b1539958e3decf4fd68cecd9c1aa8841e15c91ac122ad97722e2ca2df5187 pid=2182 runtime=io.containerd.runc.v2 Oct 2 20:32:10.704444 env[1325]: time="2023-10-02T20:32:10.704392362Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-2276519d4a,Uid:f21741c406d8bb6a08bde4a515d4a7b8,Namespace:kube-system,Attempt:0,} returns sandbox id \"0adff5cc96a897ad1a7586a10ff8dc3cb44c9bd36ac96144c8603050e7503e6f\"" Oct 2 20:32:10.710321 systemd[1]: Started cri-containerd-3c4b1539958e3decf4fd68cecd9c1aa8841e15c91ac122ad97722e2ca2df5187.scope. Oct 2 20:32:10.714213 env[1325]: time="2023-10-02T20:32:10.713555075Z" level=info msg="CreateContainer within sandbox \"0adff5cc96a897ad1a7586a10ff8dc3cb44c9bd36ac96144c8603050e7503e6f\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 20:32:10.720619 kubelet[2095]: E1002 20:32:10.720581 2095 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.16:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-2276519d4a?timeout=10s\": dial tcp 10.200.8.16:6443: connect: connection refused" interval="1.6s" Oct 2 20:32:10.729445 systemd[1]: Started cri-containerd-0c2901b34fb528c5bfdd1fef92d775f6e101516f1350ce883c717343fb9725b1.scope. Oct 2 20:32:10.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.733000 audit: BPF prog-id=66 op=LOAD Oct 2 20:32:10.734000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.734000 audit[2197]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2182 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363346231353339393538653364656366346664363863656364396331 Oct 2 20:32:10.735000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.735000 audit[2197]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2182 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.735000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363346231353339393538653364656366346664363863656364396331 Oct 2 20:32:10.735000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.735000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.735000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.735000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.735000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.735000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.735000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.735000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.735000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.735000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.735000 audit: BPF prog-id=67 op=LOAD Oct 2 20:32:10.735000 audit[2197]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001ce990 items=0 ppid=2182 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.735000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363346231353339393538653364656366346664363863656364396331 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit: BPF prog-id=68 op=LOAD Oct 2 20:32:10.738000 audit[2197]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001ce9d8 items=0 ppid=2182 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363346231353339393538653364656366346664363863656364396331 Oct 2 20:32:10.738000 audit: BPF prog-id=68 op=UNLOAD Oct 2 20:32:10.738000 audit: BPF prog-id=67 op=UNLOAD Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.738000 audit: BPF prog-id=69 op=LOAD Oct 2 20:32:10.738000 audit[2197]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001cede8 items=0 ppid=2182 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363346231353339393538653364656366346664363863656364396331 Oct 2 20:32:10.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit: BPF prog-id=70 op=LOAD Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2168 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063323930316233346662353238633562666464316665663932643737 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2168 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063323930316233346662353238633562666464316665663932643737 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit: BPF prog-id=71 op=LOAD Oct 2 20:32:10.754000 audit[2198]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000388340 items=0 ppid=2168 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063323930316233346662353238633562666464316665663932643737 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.754000 audit: BPF prog-id=72 op=LOAD Oct 2 20:32:10.754000 audit[2198]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000388388 items=0 ppid=2168 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063323930316233346662353238633562666464316665663932643737 Oct 2 20:32:10.754000 audit: BPF prog-id=72 op=UNLOAD Oct 2 20:32:10.754000 audit: BPF prog-id=71 op=UNLOAD Oct 2 20:32:10.755000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.755000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.755000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.755000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.755000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.755000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.755000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.755000 audit[2198]: AVC avc: denied { perfmon } for pid=2198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.755000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.755000 audit[2198]: AVC avc: denied { bpf } for pid=2198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.755000 audit: BPF prog-id=73 op=LOAD Oct 2 20:32:10.755000 audit[2198]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000388798 items=0 ppid=2168 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063323930316233346662353238633562666464316665663932643737 Oct 2 20:32:10.782369 env[1325]: time="2023-10-02T20:32:10.782324079Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-2276519d4a,Uid:7d77afff9c7c56442725ad0ecf3eac36,Namespace:kube-system,Attempt:0,} returns sandbox id \"3c4b1539958e3decf4fd68cecd9c1aa8841e15c91ac122ad97722e2ca2df5187\"" Oct 2 20:32:10.784214 kubelet[2095]: E1002 20:32:10.784087 2095 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-2276519d4a.178a64845c6f3c66", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-2276519d4a", UID:"ci-3510.3.0-a-2276519d4a", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-2276519d4a"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 32, 9, 307667558, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 32, 9, 307667558, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510.3.0-a-2276519d4a"}': 'Post "https://10.200.8.16:6443/api/v1/namespaces/default/events": dial tcp 10.200.8.16:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:32:10.789131 env[1325]: time="2023-10-02T20:32:10.788949234Z" level=info msg="CreateContainer within sandbox \"3c4b1539958e3decf4fd68cecd9c1aa8841e15c91ac122ad97722e2ca2df5187\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 20:32:10.795494 env[1325]: time="2023-10-02T20:32:10.795455486Z" level=info msg="CreateContainer within sandbox \"0adff5cc96a897ad1a7586a10ff8dc3cb44c9bd36ac96144c8603050e7503e6f\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"4c9c6848f8a872c22ec4552a079f66cdb4d69f9d5ec60333d523bc1e3ffbf961\"" Oct 2 20:32:10.796289 env[1325]: time="2023-10-02T20:32:10.796257404Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-2276519d4a,Uid:75cfd3d1a54e950681b90a415c6165eb,Namespace:kube-system,Attempt:0,} returns sandbox id \"0c2901b34fb528c5bfdd1fef92d775f6e101516f1350ce883c717343fb9725b1\"" Oct 2 20:32:10.796504 env[1325]: time="2023-10-02T20:32:10.796450209Z" level=info msg="StartContainer for \"4c9c6848f8a872c22ec4552a079f66cdb4d69f9d5ec60333d523bc1e3ffbf961\"" Oct 2 20:32:10.798569 env[1325]: time="2023-10-02T20:32:10.798532257Z" level=info msg="CreateContainer within sandbox \"0c2901b34fb528c5bfdd1fef92d775f6e101516f1350ce883c717343fb9725b1\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 20:32:10.814029 systemd[1]: Started cri-containerd-4c9c6848f8a872c22ec4552a079f66cdb4d69f9d5ec60333d523bc1e3ffbf961.scope. Oct 2 20:32:10.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.829000 audit: BPF prog-id=74 op=LOAD Oct 2 20:32:10.831135 kubelet[2095]: I1002 20:32:10.831114 2095 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-2276519d4a" Oct 2 20:32:10.831452 kubelet[2095]: E1002 20:32:10.831433 2095 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.16:6443/api/v1/nodes\": dial tcp 10.200.8.16:6443: connect: connection refused" node="ci-3510.3.0-a-2276519d4a" Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2135 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.830000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463396336383438663861383732633232656334353532613037396636 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2135 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.830000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463396336383438663861383732633232656334353532613037396636 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit: BPF prog-id=75 op=LOAD Oct 2 20:32:10.830000 audit[2260]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003c0760 items=0 ppid=2135 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.830000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463396336383438663861383732633232656334353532613037396636 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.830000 audit: BPF prog-id=76 op=LOAD Oct 2 20:32:10.830000 audit[2260]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003c07a8 items=0 ppid=2135 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.830000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463396336383438663861383732633232656334353532613037396636 Oct 2 20:32:10.830000 audit: BPF prog-id=76 op=UNLOAD Oct 2 20:32:10.831000 audit: BPF prog-id=75 op=UNLOAD Oct 2 20:32:10.831000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.831000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.831000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.831000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.831000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.831000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.831000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.831000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.831000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.831000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.831000 audit: BPF prog-id=77 op=LOAD Oct 2 20:32:10.831000 audit[2260]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003c0bb8 items=0 ppid=2135 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463396336383438663861383732633232656334353532613037396636 Oct 2 20:32:10.857378 env[1325]: time="2023-10-02T20:32:10.857338529Z" level=info msg="CreateContainer within sandbox \"3c4b1539958e3decf4fd68cecd9c1aa8841e15c91ac122ad97722e2ca2df5187\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"85c197f5af9cafdc75b9f3a177f3b433c92db778a5aa081940a9917d0f3a451c\"" Oct 2 20:32:10.858097 env[1325]: time="2023-10-02T20:32:10.858066746Z" level=info msg="StartContainer for \"85c197f5af9cafdc75b9f3a177f3b433c92db778a5aa081940a9917d0f3a451c\"" Oct 2 20:32:10.869492 kubelet[2095]: W1002 20:32:10.867018 2095 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.16:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-2276519d4a&limit=500&resourceVersion=0": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:10.869492 kubelet[2095]: E1002 20:32:10.867087 2095 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.16:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-2276519d4a&limit=500&resourceVersion=0": dial tcp 10.200.8.16:6443: connect: connection refused Oct 2 20:32:10.871139 env[1325]: time="2023-10-02T20:32:10.870882645Z" level=info msg="CreateContainer within sandbox \"0c2901b34fb528c5bfdd1fef92d775f6e101516f1350ce883c717343fb9725b1\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"8de9233d97b9838e3eac00d0c593208dca3ef3bb94affed52ada9803d08001aa\"" Oct 2 20:32:10.875027 env[1325]: time="2023-10-02T20:32:10.871549561Z" level=info msg="StartContainer for \"8de9233d97b9838e3eac00d0c593208dca3ef3bb94affed52ada9803d08001aa\"" Oct 2 20:32:10.878459 env[1325]: time="2023-10-02T20:32:10.878420721Z" level=info msg="StartContainer for \"4c9c6848f8a872c22ec4552a079f66cdb4d69f9d5ec60333d523bc1e3ffbf961\" returns successfully" Oct 2 20:32:10.892628 systemd[1]: Started cri-containerd-85c197f5af9cafdc75b9f3a177f3b433c92db778a5aa081940a9917d0f3a451c.scope. Oct 2 20:32:10.914491 systemd[1]: Started cri-containerd-8de9233d97b9838e3eac00d0c593208dca3ef3bb94affed52ada9803d08001aa.scope. Oct 2 20:32:10.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.928000 audit: BPF prog-id=78 op=LOAD Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { bpf } for pid=2298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2182 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835633139376635616639636166646337356239663361313737663362 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { perfmon } for pid=2298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2182 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835633139376635616639636166646337356239663361313737663362 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { bpf } for pid=2298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { bpf } for pid=2298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { bpf } for pid=2298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { perfmon } for pid=2298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { perfmon } for pid=2298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { perfmon } for pid=2298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { perfmon } for pid=2298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { perfmon } for pid=2298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { bpf } for pid=2298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { bpf } for pid=2298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit: BPF prog-id=79 op=LOAD Oct 2 20:32:10.929000 audit[2298]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000215830 items=0 ppid=2182 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835633139376635616639636166646337356239663361313737663362 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { bpf } for pid=2298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { bpf } for pid=2298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { perfmon } for pid=2298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { perfmon } for pid=2298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { perfmon } for pid=2298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { perfmon } for pid=2298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { perfmon } for pid=2298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { bpf } for pid=2298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { bpf } for pid=2298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit: BPF prog-id=80 op=LOAD Oct 2 20:32:10.929000 audit[2298]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000215878 items=0 ppid=2182 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835633139376635616639636166646337356239663361313737663362 Oct 2 20:32:10.929000 audit: BPF prog-id=80 op=UNLOAD Oct 2 20:32:10.929000 audit: BPF prog-id=79 op=UNLOAD Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { bpf } for pid=2298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { bpf } for pid=2298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { bpf } for pid=2298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { perfmon } for pid=2298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { perfmon } for pid=2298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { perfmon } for pid=2298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { perfmon } for pid=2298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { perfmon } for pid=2298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { bpf } for pid=2298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit[2298]: AVC avc: denied { bpf } for pid=2298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.929000 audit: BPF prog-id=81 op=LOAD Oct 2 20:32:10.929000 audit[2298]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000215c88 items=0 ppid=2182 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835633139376635616639636166646337356239663361313737663362 Oct 2 20:32:10.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.965000 audit: BPF prog-id=82 op=LOAD Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2168 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864653932333364393762393833386533656163303064306335393332 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2168 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864653932333364393762393833386533656163303064306335393332 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit: BPF prog-id=83 op=LOAD Oct 2 20:32:10.966000 audit[2311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0000243b0 items=0 ppid=2168 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864653932333364393762393833386533656163303064306335393332 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit: BPF prog-id=84 op=LOAD Oct 2 20:32:10.966000 audit[2311]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000243f8 items=0 ppid=2168 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864653932333364393762393833386533656163303064306335393332 Oct 2 20:32:10.966000 audit: BPF prog-id=84 op=UNLOAD Oct 2 20:32:10.966000 audit: BPF prog-id=83 op=UNLOAD Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { perfmon } for pid=2311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit[2311]: AVC avc: denied { bpf } for pid=2311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:10.966000 audit: BPF prog-id=85 op=LOAD Oct 2 20:32:10.966000 audit[2311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000024808 items=0 ppid=2168 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:10.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864653932333364393762393833386533656163303064306335393332 Oct 2 20:32:11.021053 env[1325]: time="2023-10-02T20:32:11.018693682Z" level=info msg="StartContainer for \"85c197f5af9cafdc75b9f3a177f3b433c92db778a5aa081940a9917d0f3a451c\" returns successfully" Oct 2 20:32:11.027458 env[1325]: time="2023-10-02T20:32:11.027393080Z" level=info msg="StartContainer for \"8de9233d97b9838e3eac00d0c593208dca3ef3bb94affed52ada9803d08001aa\" returns successfully" Oct 2 20:32:12.433538 kubelet[2095]: I1002 20:32:12.433496 2095 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-2276519d4a" Oct 2 20:32:13.181000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:13.181000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000a46000 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:32:13.181000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:13.181000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:13.181000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0000ce700 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:32:13.181000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:13.226000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:13.226000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c0080df1a0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:32:13.226000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:32:13.226000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:13.226000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c0046cb340 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:32:13.226000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:32:13.228000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:13.234000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:13.234000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0080dff80 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:32:13.234000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:32:13.228000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c007a8e630 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:32:13.228000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:32:13.305000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:13.305000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0022be520 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:32:13.305000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:32:13.306000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:13.306000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c003f5e720 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:32:13.306000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:32:13.357373 kubelet[2095]: E1002 20:32:13.357336 2095 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-2276519d4a\" not found" node="ci-3510.3.0-a-2276519d4a" Oct 2 20:32:13.427957 kubelet[2095]: I1002 20:32:13.427917 2095 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-2276519d4a" Oct 2 20:32:14.064561 kubelet[2095]: E1002 20:32:14.064515 2095 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-2276519d4a\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:14.310110 kubelet[2095]: I1002 20:32:14.310073 2095 apiserver.go:52] "Watching apiserver" Oct 2 20:32:14.317041 kubelet[2095]: I1002 20:32:14.316922 2095 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:32:15.972042 systemd[1]: Reloading. Oct 2 20:32:16.069458 /usr/lib/systemd/system-generators/torcx-generator[2385]: time="2023-10-02T20:32:16Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:32:16.069498 /usr/lib/systemd/system-generators/torcx-generator[2385]: time="2023-10-02T20:32:16Z" level=info msg="torcx already run" Oct 2 20:32:16.168680 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:32:16.168700 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:32:16.187492 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:32:16.196000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=4894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:32:16.202551 kernel: kauditd_printk_skb: 581 callbacks suppressed Oct 2 20:32:16.202659 kernel: audit: type=1400 audit(1696278736.196:693): avc: denied { watch } for pid=2323 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=4894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:32:16.196000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000f2ae00 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:32:16.249224 kernel: audit: type=1300 audit(1696278736.196:693): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000f2ae00 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:32:16.196000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:16.271023 kernel: audit: type=1327 audit(1696278736.196:693): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:16.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.314504 kernel: audit: type=1400 audit(1696278736.298:694): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.342308 kernel: audit: type=1400 audit(1696278736.298:695): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.342449 kernel: audit: type=1400 audit(1696278736.298:696): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.377962 kernel: audit: type=1400 audit(1696278736.298:697): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.378112 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:32:16.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.397429 kernel: audit: type=1400 audit(1696278736.298:698): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.397580 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:32:16.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.313000 audit: BPF prog-id=86 op=LOAD Oct 2 20:32:16.313000 audit: BPF prog-id=82 op=UNLOAD Oct 2 20:32:16.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit: BPF prog-id=87 op=LOAD Oct 2 20:32:16.327000 audit: BPF prog-id=47 op=UNLOAD Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit: BPF prog-id=88 op=LOAD Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.341000 audit: BPF prog-id=89 op=LOAD Oct 2 20:32:16.341000 audit: BPF prog-id=48 op=UNLOAD Oct 2 20:32:16.341000 audit: BPF prog-id=49 op=UNLOAD Oct 2 20:32:16.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.373000 audit: BPF prog-id=90 op=LOAD Oct 2 20:32:16.373000 audit: BPF prog-id=78 op=UNLOAD Oct 2 20:32:16.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.374000 audit: BPF prog-id=91 op=LOAD Oct 2 20:32:16.374000 audit: BPF prog-id=66 op=UNLOAD Oct 2 20:32:16.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.401000 audit: BPF prog-id=92 op=LOAD Oct 2 20:32:16.401000 audit: BPF prog-id=50 op=UNLOAD Oct 2 20:32:16.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.402000 audit: BPF prog-id=51 op=UNLOAD Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit: BPF prog-id=94 op=LOAD Oct 2 20:32:16.403000 audit: BPF prog-id=52 op=UNLOAD Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit: BPF prog-id=95 op=LOAD Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.403000 audit: BPF prog-id=96 op=LOAD Oct 2 20:32:16.403000 audit: BPF prog-id=53 op=UNLOAD Oct 2 20:32:16.403000 audit: BPF prog-id=54 op=UNLOAD Oct 2 20:32:16.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit: BPF prog-id=97 op=LOAD Oct 2 20:32:16.406000 audit: BPF prog-id=55 op=UNLOAD Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit: BPF prog-id=98 op=LOAD Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.406000 audit: BPF prog-id=99 op=LOAD Oct 2 20:32:16.406000 audit: BPF prog-id=56 op=UNLOAD Oct 2 20:32:16.406000 audit: BPF prog-id=57 op=UNLOAD Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit: BPF prog-id=100 op=LOAD Oct 2 20:32:16.408000 audit: BPF prog-id=58 op=UNLOAD Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit: BPF prog-id=101 op=LOAD Oct 2 20:32:16.409000 audit: BPF prog-id=59 op=UNLOAD Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit: BPF prog-id=102 op=LOAD Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.409000 audit: BPF prog-id=103 op=LOAD Oct 2 20:32:16.410000 audit: BPF prog-id=60 op=UNLOAD Oct 2 20:32:16.410000 audit: BPF prog-id=61 op=UNLOAD Oct 2 20:32:16.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.414000 audit: BPF prog-id=104 op=LOAD Oct 2 20:32:16.414000 audit: BPF prog-id=70 op=UNLOAD Oct 2 20:32:16.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.414000 audit: BPF prog-id=105 op=LOAD Oct 2 20:32:16.415000 audit: BPF prog-id=62 op=UNLOAD Oct 2 20:32:16.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.415000 audit: BPF prog-id=106 op=LOAD Oct 2 20:32:16.415000 audit: BPF prog-id=74 op=UNLOAD Oct 2 20:32:16.438093 systemd[1]: Stopping kubelet.service... Oct 2 20:32:16.438981 kubelet[2095]: I1002 20:32:16.438393 2095 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:32:16.460428 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 20:32:16.460659 systemd[1]: Stopped kubelet.service. Oct 2 20:32:16.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:16.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:16.462917 systemd[1]: Started kubelet.service. Oct 2 20:32:16.556044 kubelet[2448]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:32:16.556044 kubelet[2448]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:32:16.556044 kubelet[2448]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:32:16.556044 kubelet[2448]: I1002 20:32:16.550803 2448 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:32:16.557041 kubelet[2448]: I1002 20:32:16.556965 2448 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 20:32:16.557041 kubelet[2448]: I1002 20:32:16.557011 2448 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:32:16.559022 kubelet[2448]: I1002 20:32:16.557242 2448 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 20:32:16.559572 kubelet[2448]: I1002 20:32:16.559544 2448 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 20:32:16.561695 kubelet[2448]: I1002 20:32:16.561670 2448 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:32:16.566584 kubelet[2448]: I1002 20:32:16.566544 2448 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:32:16.566799 kubelet[2448]: I1002 20:32:16.566779 2448 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:32:16.566978 kubelet[2448]: I1002 20:32:16.566958 2448 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 20:32:16.567127 kubelet[2448]: I1002 20:32:16.566990 2448 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 20:32:16.567127 kubelet[2448]: I1002 20:32:16.567016 2448 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 20:32:16.567127 kubelet[2448]: I1002 20:32:16.567058 2448 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:32:16.567654 kubelet[2448]: I1002 20:32:16.567173 2448 kubelet.go:393] "Attempting to sync node with API server" Oct 2 20:32:16.567654 kubelet[2448]: I1002 20:32:16.567190 2448 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:32:16.569020 kubelet[2448]: I1002 20:32:16.567895 2448 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:32:16.577054 kubelet[2448]: I1002 20:32:16.577026 2448 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:32:16.582000 audit[2462]: USER_ACCT pid=2462 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:32:16.582000 audit[2462]: CRED_REFR pid=2462 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:32:16.583698 sudo[2462]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 20:32:16.583953 sudo[2462]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 20:32:16.585649 kubelet[2448]: I1002 20:32:16.585625 2448 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:32:16.586307 kubelet[2448]: I1002 20:32:16.586285 2448 server.go:1232] "Started kubelet" Oct 2 20:32:16.587000 audit[2448]: AVC avc: denied { mac_admin } for pid=2448 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.587000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:32:16.587000 audit[2448]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ba13e0 a1=c000b38d50 a2=c000ba13b0 a3=25 items=0 ppid=1 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:16.587000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:32:16.587000 audit[2448]: AVC avc: denied { mac_admin } for pid=2448 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.587000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:32:16.587000 audit[2448]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b468c0 a1=c000b38d68 a2=c000ba1470 a3=25 items=0 ppid=1 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:16.587000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:32:16.590794 kubelet[2448]: I1002 20:32:16.588548 2448 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:32:16.590794 kubelet[2448]: I1002 20:32:16.588592 2448 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:32:16.590794 kubelet[2448]: I1002 20:32:16.588629 2448 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:32:16.590000 audit[2462]: USER_START pid=2462 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:32:16.597268 kubelet[2448]: I1002 20:32:16.597246 2448 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:32:16.602951 kubelet[2448]: I1002 20:32:16.602931 2448 server.go:462] "Adding debug handlers to kubelet server" Oct 2 20:32:16.604643 kubelet[2448]: I1002 20:32:16.604624 2448 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:32:16.604921 kubelet[2448]: I1002 20:32:16.604910 2448 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 20:32:16.608545 kubelet[2448]: E1002 20:32:16.607418 2448 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:32:16.608545 kubelet[2448]: E1002 20:32:16.607447 2448 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:32:16.609819 kubelet[2448]: I1002 20:32:16.609802 2448 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 20:32:16.614966 kubelet[2448]: I1002 20:32:16.614947 2448 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:32:16.615307 kubelet[2448]: I1002 20:32:16.615296 2448 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 20:32:16.626059 kubelet[2448]: I1002 20:32:16.626028 2448 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 20:32:16.627428 kubelet[2448]: I1002 20:32:16.627392 2448 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 20:32:16.627428 kubelet[2448]: I1002 20:32:16.627430 2448 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 20:32:16.627597 kubelet[2448]: I1002 20:32:16.627449 2448 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 20:32:16.627597 kubelet[2448]: E1002 20:32:16.627499 2448 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:32:16.722336 kubelet[2448]: I1002 20:32:16.722305 2448 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-2276519d4a" Oct 2 20:32:16.727669 kubelet[2448]: E1002 20:32:16.727639 2448 kubelet.go:2327] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 20:32:16.728723 kubelet[2448]: I1002 20:32:16.728707 2448 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:32:16.728853 kubelet[2448]: I1002 20:32:16.728845 2448 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:32:16.729008 kubelet[2448]: I1002 20:32:16.728983 2448 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:32:16.729289 kubelet[2448]: I1002 20:32:16.729277 2448 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 20:32:16.729406 kubelet[2448]: I1002 20:32:16.729397 2448 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 2 20:32:16.729488 kubelet[2448]: I1002 20:32:16.729482 2448 policy_none.go:49] "None policy: Start" Oct 2 20:32:16.730475 kubelet[2448]: I1002 20:32:16.730458 2448 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:32:16.730608 kubelet[2448]: I1002 20:32:16.730596 2448 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:32:16.730887 kubelet[2448]: I1002 20:32:16.730872 2448 state_mem.go:75] "Updated machine memory state" Oct 2 20:32:16.734845 kubelet[2448]: I1002 20:32:16.734828 2448 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-2276519d4a" Oct 2 20:32:16.735055 kubelet[2448]: I1002 20:32:16.735026 2448 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-2276519d4a" Oct 2 20:32:16.742455 kubelet[2448]: I1002 20:32:16.742422 2448 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:32:16.741000 audit[2448]: AVC avc: denied { mac_admin } for pid=2448 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:16.741000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:32:16.741000 audit[2448]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0005c92f0 a1=c000d56828 a2=c0005c92c0 a3=25 items=0 ppid=1 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:16.741000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:32:16.743178 kubelet[2448]: I1002 20:32:16.743161 2448 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:32:16.743523 kubelet[2448]: I1002 20:32:16.743511 2448 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:32:16.930224 kubelet[2448]: I1002 20:32:16.928366 2448 topology_manager.go:215] "Topology Admit Handler" podUID="f21741c406d8bb6a08bde4a515d4a7b8" podNamespace="kube-system" podName="kube-apiserver-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:16.930224 kubelet[2448]: I1002 20:32:16.928527 2448 topology_manager.go:215] "Topology Admit Handler" podUID="7d77afff9c7c56442725ad0ecf3eac36" podNamespace="kube-system" podName="kube-controller-manager-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:16.930224 kubelet[2448]: I1002 20:32:16.928599 2448 topology_manager.go:215] "Topology Admit Handler" podUID="75cfd3d1a54e950681b90a415c6165eb" podNamespace="kube-system" podName="kube-scheduler-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:16.937919 kubelet[2448]: W1002 20:32:16.937814 2448 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:32:16.940059 kubelet[2448]: W1002 20:32:16.940037 2448 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:32:16.941462 kubelet[2448]: W1002 20:32:16.941441 2448 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:32:17.017330 kubelet[2448]: I1002 20:32:17.017288 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f21741c406d8bb6a08bde4a515d4a7b8-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-2276519d4a\" (UID: \"f21741c406d8bb6a08bde4a515d4a7b8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:17.017569 kubelet[2448]: I1002 20:32:17.017558 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7d77afff9c7c56442725ad0ecf3eac36-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-2276519d4a\" (UID: \"7d77afff9c7c56442725ad0ecf3eac36\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:17.017696 kubelet[2448]: I1002 20:32:17.017687 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7d77afff9c7c56442725ad0ecf3eac36-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-2276519d4a\" (UID: \"7d77afff9c7c56442725ad0ecf3eac36\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:17.017823 kubelet[2448]: I1002 20:32:17.017797 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/75cfd3d1a54e950681b90a415c6165eb-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-2276519d4a\" (UID: \"75cfd3d1a54e950681b90a415c6165eb\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:17.017899 kubelet[2448]: I1002 20:32:17.017830 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f21741c406d8bb6a08bde4a515d4a7b8-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-2276519d4a\" (UID: \"f21741c406d8bb6a08bde4a515d4a7b8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:17.017899 kubelet[2448]: I1002 20:32:17.017871 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f21741c406d8bb6a08bde4a515d4a7b8-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-2276519d4a\" (UID: \"f21741c406d8bb6a08bde4a515d4a7b8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:17.017987 kubelet[2448]: I1002 20:32:17.017916 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7d77afff9c7c56442725ad0ecf3eac36-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-2276519d4a\" (UID: \"7d77afff9c7c56442725ad0ecf3eac36\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:17.017987 kubelet[2448]: I1002 20:32:17.017964 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/7d77afff9c7c56442725ad0ecf3eac36-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-2276519d4a\" (UID: \"7d77afff9c7c56442725ad0ecf3eac36\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:17.018102 kubelet[2448]: I1002 20:32:17.018012 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7d77afff9c7c56442725ad0ecf3eac36-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-2276519d4a\" (UID: \"7d77afff9c7c56442725ad0ecf3eac36\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2276519d4a" Oct 2 20:32:17.224000 audit[2462]: USER_END pid=2462 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:32:17.224000 audit[2462]: CRED_DISP pid=2462 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:32:17.224937 sudo[2462]: pam_unix(sudo:session): session closed for user root Oct 2 20:32:17.598438 kubelet[2448]: I1002 20:32:17.598406 2448 apiserver.go:52] "Watching apiserver" Oct 2 20:32:17.615824 kubelet[2448]: I1002 20:32:17.615789 2448 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:32:17.683491 kubelet[2448]: I1002 20:32:17.683461 2448 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-2276519d4a" podStartSLOduration=1.683404306 podCreationTimestamp="2023-10-02 20:32:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:32:17.682528889 +0000 UTC m=+1.211104279" watchObservedRunningTime="2023-10-02 20:32:17.683404306 +0000 UTC m=+1.211979796" Oct 2 20:32:17.707964 kubelet[2448]: I1002 20:32:17.707934 2448 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-2276519d4a" podStartSLOduration=1.707881885 podCreationTimestamp="2023-10-02 20:32:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:32:17.698780607 +0000 UTC m=+1.227356097" watchObservedRunningTime="2023-10-02 20:32:17.707881885 +0000 UTC m=+1.236457375" Oct 2 20:32:17.719051 kubelet[2448]: I1002 20:32:17.719014 2448 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-2276519d4a" podStartSLOduration=1.718957902 podCreationTimestamp="2023-10-02 20:32:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:32:17.708692901 +0000 UTC m=+1.237268391" watchObservedRunningTime="2023-10-02 20:32:17.718957902 +0000 UTC m=+1.247533392" Oct 2 20:32:18.563305 sudo[1684]: pam_unix(sudo:session): session closed for user root Oct 2 20:32:18.562000 audit[1684]: USER_END pid=1684 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:32:18.562000 audit[1684]: CRED_DISP pid=1684 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:32:18.663014 sshd[1681]: pam_unix(sshd:session): session closed for user core Oct 2 20:32:18.664000 audit[1681]: USER_END pid=1681 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:32:18.664000 audit[1681]: CRED_DISP pid=1681 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:32:18.667179 systemd[1]: sshd@6-10.200.8.16:22-10.200.12.6:52986.service: Deactivated successfully. Oct 2 20:32:18.668078 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 20:32:18.668266 systemd[1]: session-9.scope: Consumed 3.760s CPU time. Oct 2 20:32:18.666000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.16:22-10.200.12.6:52986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:18.668798 systemd-logind[1309]: Session 9 logged out. Waiting for processes to exit. Oct 2 20:32:18.669753 systemd-logind[1309]: Removed session 9. Oct 2 20:32:28.080000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:28.086024 kernel: kauditd_printk_skb: 271 callbacks suppressed Oct 2 20:32:28.086132 kernel: audit: type=1400 audit(1696278748.080:948): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:28.084000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:28.117673 kernel: audit: type=1400 audit(1696278748.084:949): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:28.117783 kernel: audit: type=1300 audit(1696278748.084:949): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012cc4e0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:32:28.084000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012cc4e0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:32:28.084000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:28.160332 kernel: audit: type=1327 audit(1696278748.084:949): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:28.160473 kernel: audit: type=1400 audit(1696278748.084:950): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:28.084000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:28.084000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012cc520 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:32:28.084000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:28.217141 kernel: audit: type=1300 audit(1696278748.084:950): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012cc520 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:32:28.217288 kernel: audit: type=1327 audit(1696278748.084:950): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:28.217317 kernel: audit: type=1400 audit(1696278748.084:951): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:28.084000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:28.084000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012cc560 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:32:28.256101 kernel: audit: type=1300 audit(1696278748.084:951): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012cc560 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:32:28.256240 kernel: audit: type=1327 audit(1696278748.084:951): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:28.084000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:28.080000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e7d9c0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:32:28.080000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:28.688968 kubelet[2448]: I1002 20:32:28.688928 2448 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 20:32:28.689644 env[1325]: time="2023-10-02T20:32:28.689600495Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 20:32:28.690014 kubelet[2448]: I1002 20:32:28.689864 2448 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 20:32:29.469225 kubelet[2448]: I1002 20:32:29.469188 2448 topology_manager.go:215] "Topology Admit Handler" podUID="56b5d6ff-c027-4b24-b4d3-29509f7f04d1" podNamespace="kube-system" podName="kube-proxy-lx72v" Oct 2 20:32:29.475941 systemd[1]: Created slice kubepods-besteffort-pod56b5d6ff_c027_4b24_b4d3_29509f7f04d1.slice. Oct 2 20:32:29.484479 kubelet[2448]: I1002 20:32:29.484450 2448 topology_manager.go:215] "Topology Admit Handler" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" podNamespace="kube-system" podName="cilium-h6ptb" Oct 2 20:32:29.490458 systemd[1]: Created slice kubepods-burstable-pod788f4114_8c97_4ea0_ba33_c33540486cf1.slice. Oct 2 20:32:29.501238 kubelet[2448]: I1002 20:32:29.501209 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-cni-path\") pod \"cilium-h6ptb\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " pod="kube-system/cilium-h6ptb" Oct 2 20:32:29.501466 kubelet[2448]: I1002 20:32:29.501451 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-xtables-lock\") pod \"cilium-h6ptb\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " pod="kube-system/cilium-h6ptb" Oct 2 20:32:29.501613 kubelet[2448]: I1002 20:32:29.501602 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-cilium-run\") pod \"cilium-h6ptb\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " pod="kube-system/cilium-h6ptb" Oct 2 20:32:29.501767 kubelet[2448]: I1002 20:32:29.501755 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/788f4114-8c97-4ea0-ba33-c33540486cf1-cilium-config-path\") pod \"cilium-h6ptb\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " pod="kube-system/cilium-h6ptb" Oct 2 20:32:29.501908 kubelet[2448]: I1002 20:32:29.501896 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-bpf-maps\") pod \"cilium-h6ptb\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " pod="kube-system/cilium-h6ptb" Oct 2 20:32:29.502071 kubelet[2448]: I1002 20:32:29.502056 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/788f4114-8c97-4ea0-ba33-c33540486cf1-clustermesh-secrets\") pod \"cilium-h6ptb\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " pod="kube-system/cilium-h6ptb" Oct 2 20:32:29.502242 kubelet[2448]: I1002 20:32:29.502228 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6q56l\" (UniqueName: \"kubernetes.io/projected/56b5d6ff-c027-4b24-b4d3-29509f7f04d1-kube-api-access-6q56l\") pod \"kube-proxy-lx72v\" (UID: \"56b5d6ff-c027-4b24-b4d3-29509f7f04d1\") " pod="kube-system/kube-proxy-lx72v" Oct 2 20:32:29.502380 kubelet[2448]: I1002 20:32:29.502368 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-hostproc\") pod \"cilium-h6ptb\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " pod="kube-system/cilium-h6ptb" Oct 2 20:32:29.502497 kubelet[2448]: I1002 20:32:29.502486 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-host-proc-sys-kernel\") pod \"cilium-h6ptb\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " pod="kube-system/cilium-h6ptb" Oct 2 20:32:29.502609 kubelet[2448]: I1002 20:32:29.502599 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/56b5d6ff-c027-4b24-b4d3-29509f7f04d1-lib-modules\") pod \"kube-proxy-lx72v\" (UID: \"56b5d6ff-c027-4b24-b4d3-29509f7f04d1\") " pod="kube-system/kube-proxy-lx72v" Oct 2 20:32:29.502722 kubelet[2448]: I1002 20:32:29.502712 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-lib-modules\") pod \"cilium-h6ptb\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " pod="kube-system/cilium-h6ptb" Oct 2 20:32:29.502856 kubelet[2448]: I1002 20:32:29.502826 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-host-proc-sys-net\") pod \"cilium-h6ptb\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " pod="kube-system/cilium-h6ptb" Oct 2 20:32:29.502984 kubelet[2448]: I1002 20:32:29.502974 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9mjss\" (UniqueName: \"kubernetes.io/projected/788f4114-8c97-4ea0-ba33-c33540486cf1-kube-api-access-9mjss\") pod \"cilium-h6ptb\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " pod="kube-system/cilium-h6ptb" Oct 2 20:32:29.503128 kubelet[2448]: I1002 20:32:29.503116 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/56b5d6ff-c027-4b24-b4d3-29509f7f04d1-kube-proxy\") pod \"kube-proxy-lx72v\" (UID: \"56b5d6ff-c027-4b24-b4d3-29509f7f04d1\") " pod="kube-system/kube-proxy-lx72v" Oct 2 20:32:29.503263 kubelet[2448]: I1002 20:32:29.503251 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/56b5d6ff-c027-4b24-b4d3-29509f7f04d1-xtables-lock\") pod \"kube-proxy-lx72v\" (UID: \"56b5d6ff-c027-4b24-b4d3-29509f7f04d1\") " pod="kube-system/kube-proxy-lx72v" Oct 2 20:32:29.503393 kubelet[2448]: I1002 20:32:29.503383 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-cilium-cgroup\") pod \"cilium-h6ptb\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " pod="kube-system/cilium-h6ptb" Oct 2 20:32:29.503514 kubelet[2448]: I1002 20:32:29.503501 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-etc-cni-netd\") pod \"cilium-h6ptb\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " pod="kube-system/cilium-h6ptb" Oct 2 20:32:29.503633 kubelet[2448]: I1002 20:32:29.503624 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/788f4114-8c97-4ea0-ba33-c33540486cf1-hubble-tls\") pod \"cilium-h6ptb\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " pod="kube-system/cilium-h6ptb" Oct 2 20:32:29.718538 kubelet[2448]: I1002 20:32:29.718500 2448 topology_manager.go:215] "Topology Admit Handler" podUID="ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4" podNamespace="kube-system" podName="cilium-operator-6bc8ccdb58-xqb86" Oct 2 20:32:29.724618 systemd[1]: Created slice kubepods-besteffort-podee6e0533_fe72_4ea0_9ac8_9bd6d62ac7f4.slice. Oct 2 20:32:29.784330 env[1325]: time="2023-10-02T20:32:29.784278330Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-lx72v,Uid:56b5d6ff-c027-4b24-b4d3-29509f7f04d1,Namespace:kube-system,Attempt:0,}" Oct 2 20:32:29.794899 env[1325]: time="2023-10-02T20:32:29.794858787Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-h6ptb,Uid:788f4114-8c97-4ea0-ba33-c33540486cf1,Namespace:kube-system,Attempt:0,}" Oct 2 20:32:29.805519 kubelet[2448]: I1002 20:32:29.805488 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4-cilium-config-path\") pod \"cilium-operator-6bc8ccdb58-xqb86\" (UID: \"ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4\") " pod="kube-system/cilium-operator-6bc8ccdb58-xqb86" Oct 2 20:32:29.805519 kubelet[2448]: I1002 20:32:29.805533 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vb8l4\" (UniqueName: \"kubernetes.io/projected/ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4-kube-api-access-vb8l4\") pod \"cilium-operator-6bc8ccdb58-xqb86\" (UID: \"ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4\") " pod="kube-system/cilium-operator-6bc8ccdb58-xqb86" Oct 2 20:32:29.831708 env[1325]: time="2023-10-02T20:32:29.828464986Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:32:29.831708 env[1325]: time="2023-10-02T20:32:29.828514186Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:32:29.831708 env[1325]: time="2023-10-02T20:32:29.828554387Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:32:29.831708 env[1325]: time="2023-10-02T20:32:29.828812591Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ba56463401bc02a203d562e3adcc6867dfb1cdbf1b444822ae0fa7f337713615 pid=2524 runtime=io.containerd.runc.v2 Oct 2 20:32:29.857308 systemd[1]: Started cri-containerd-ba56463401bc02a203d562e3adcc6867dfb1cdbf1b444822ae0fa7f337713615.scope. Oct 2 20:32:29.867246 env[1325]: time="2023-10-02T20:32:29.867170859Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:32:29.867512 env[1325]: time="2023-10-02T20:32:29.867466364Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:32:29.867512 env[1325]: time="2023-10-02T20:32:29.867489764Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:32:29.870175 env[1325]: time="2023-10-02T20:32:29.870064402Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b pid=2547 runtime=io.containerd.runc.v2 Oct 2 20:32:29.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.883000 audit: BPF prog-id=107 op=LOAD Oct 2 20:32:29.884000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.884000 audit[2534]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2524 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:29.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353634363334303162633032613230336435363265336164636336 Oct 2 20:32:29.884000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.884000 audit[2534]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2524 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:29.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353634363334303162633032613230336435363265336164636336 Oct 2 20:32:29.885000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.885000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.885000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.885000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.885000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.885000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.885000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.885000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.885000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.885000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.885000 audit: BPF prog-id=108 op=LOAD Oct 2 20:32:29.885000 audit[2534]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00026b950 items=0 ppid=2524 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:29.885000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353634363334303162633032613230336435363265336164636336 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit: BPF prog-id=109 op=LOAD Oct 2 20:32:29.886000 audit[2534]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00026b998 items=0 ppid=2524 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:29.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353634363334303162633032613230336435363265336164636336 Oct 2 20:32:29.886000 audit: BPF prog-id=109 op=UNLOAD Oct 2 20:32:29.886000 audit: BPF prog-id=108 op=UNLOAD Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { perfmon } for pid=2534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit[2534]: AVC avc: denied { bpf } for pid=2534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.886000 audit: BPF prog-id=110 op=LOAD Oct 2 20:32:29.886000 audit[2534]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00026bda8 items=0 ppid=2524 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:29.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261353634363334303162633032613230336435363265336164636336 Oct 2 20:32:29.889070 systemd[1]: Started cri-containerd-f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b.scope. Oct 2 20:32:29.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit: BPF prog-id=111 op=LOAD Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=2547 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:29.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634336336353737643238363437613862363766663263313663376264 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00019f6b0 a2=3c a3=c items=0 ppid=2547 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:29.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634336336353737643238363437613862363766663263313663376264 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit: BPF prog-id=112 op=LOAD Oct 2 20:32:29.915000 audit[2568]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00019f9d8 a2=78 a3=c0003ba660 items=0 ppid=2547 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:29.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634336336353737643238363437613862363766663263313663376264 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.915000 audit: BPF prog-id=113 op=LOAD Oct 2 20:32:29.915000 audit[2568]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00019f770 a2=78 a3=c0003ba6a8 items=0 ppid=2547 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:29.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634336336353737643238363437613862363766663263313663376264 Oct 2 20:32:29.916000 audit: BPF prog-id=113 op=UNLOAD Oct 2 20:32:29.916000 audit: BPF prog-id=112 op=UNLOAD Oct 2 20:32:29.916000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.916000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.916000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.916000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.916000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.916000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.916000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.916000 audit[2568]: AVC avc: denied { perfmon } for pid=2568 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.916000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.916000 audit[2568]: AVC avc: denied { bpf } for pid=2568 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:29.916000 audit: BPF prog-id=114 op=LOAD Oct 2 20:32:29.916000 audit[2568]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00019fc30 a2=78 a3=c0003baab8 items=0 ppid=2547 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:29.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634336336353737643238363437613862363766663263313663376264 Oct 2 20:32:29.923657 env[1325]: time="2023-10-02T20:32:29.921759669Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-lx72v,Uid:56b5d6ff-c027-4b24-b4d3-29509f7f04d1,Namespace:kube-system,Attempt:0,} returns sandbox id \"ba56463401bc02a203d562e3adcc6867dfb1cdbf1b444822ae0fa7f337713615\"" Oct 2 20:32:29.928296 env[1325]: time="2023-10-02T20:32:29.928254765Z" level=info msg="CreateContainer within sandbox \"ba56463401bc02a203d562e3adcc6867dfb1cdbf1b444822ae0fa7f337713615\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 20:32:29.946383 env[1325]: time="2023-10-02T20:32:29.946342133Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-h6ptb,Uid:788f4114-8c97-4ea0-ba33-c33540486cf1,Namespace:kube-system,Attempt:0,} returns sandbox id \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\"" Oct 2 20:32:29.950137 env[1325]: time="2023-10-02T20:32:29.950097789Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 20:32:30.003109 env[1325]: time="2023-10-02T20:32:30.003061974Z" level=info msg="CreateContainer within sandbox \"ba56463401bc02a203d562e3adcc6867dfb1cdbf1b444822ae0fa7f337713615\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"653c0738229f12821c852e7d11290dd095f502bf07020fd704b921352aa9ee2e\"" Oct 2 20:32:30.003847 env[1325]: time="2023-10-02T20:32:30.003812985Z" level=info msg="StartContainer for \"653c0738229f12821c852e7d11290dd095f502bf07020fd704b921352aa9ee2e\"" Oct 2 20:32:30.021488 systemd[1]: Started cri-containerd-653c0738229f12821c852e7d11290dd095f502bf07020fd704b921352aa9ee2e.scope. Oct 2 20:32:30.031233 env[1325]: time="2023-10-02T20:32:30.031192582Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-xqb86,Uid:ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4,Namespace:kube-system,Attempt:0,}" Oct 2 20:32:30.038000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.038000 audit[2606]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2524 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635336330373338323239663132383231633835326537643131323930 Oct 2 20:32:30.038000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.038000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.038000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.038000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.038000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.038000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.038000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.038000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.038000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.038000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.038000 audit: BPF prog-id=115 op=LOAD Oct 2 20:32:30.038000 audit[2606]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00027e700 items=0 ppid=2524 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635336330373338323239663132383231633835326537643131323930 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit: BPF prog-id=116 op=LOAD Oct 2 20:32:30.039000 audit[2606]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00027e748 items=0 ppid=2524 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635336330373338323239663132383231633835326537643131323930 Oct 2 20:32:30.039000 audit: BPF prog-id=116 op=UNLOAD Oct 2 20:32:30.039000 audit: BPF prog-id=115 op=UNLOAD Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { perfmon } for pid=2606 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit[2606]: AVC avc: denied { bpf } for pid=2606 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.039000 audit: BPF prog-id=117 op=LOAD Oct 2 20:32:30.039000 audit[2606]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00027e7d8 items=0 ppid=2524 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635336330373338323239663132383231633835326537643131323930 Oct 2 20:32:30.066669 env[1325]: time="2023-10-02T20:32:30.066616296Z" level=info msg="StartContainer for \"653c0738229f12821c852e7d11290dd095f502bf07020fd704b921352aa9ee2e\" returns successfully" Oct 2 20:32:30.075089 env[1325]: time="2023-10-02T20:32:30.074877016Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:32:30.075089 env[1325]: time="2023-10-02T20:32:30.074978117Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:32:30.075089 env[1325]: time="2023-10-02T20:32:30.075026118Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:32:30.075425 env[1325]: time="2023-10-02T20:32:30.075372423Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a pid=2641 runtime=io.containerd.runc.v2 Oct 2 20:32:30.093061 systemd[1]: Started cri-containerd-841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a.scope. Oct 2 20:32:30.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit: BPF prog-id=118 op=LOAD Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2641 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834316332353961623464633538326131326562623339356362396562 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2641 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834316332353961623464633538326131326562623339356362396562 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit: BPF prog-id=119 op=LOAD Oct 2 20:32:30.120000 audit[2651]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000256e0 items=0 ppid=2641 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834316332353961623464633538326131326562623339356362396562 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit: BPF prog-id=120 op=LOAD Oct 2 20:32:30.120000 audit[2651]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000025728 items=0 ppid=2641 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834316332353961623464633538326131326562623339356362396562 Oct 2 20:32:30.120000 audit: BPF prog-id=120 op=UNLOAD Oct 2 20:32:30.120000 audit: BPF prog-id=119 op=UNLOAD Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:30.120000 audit: BPF prog-id=121 op=LOAD Oct 2 20:32:30.120000 audit[2651]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000025b38 items=0 ppid=2641 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834316332353961623464633538326131326562623339356362396562 Oct 2 20:32:30.165621 env[1325]: time="2023-10-02T20:32:30.165567732Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-xqb86,Uid:ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4,Namespace:kube-system,Attempt:0,} returns sandbox id \"841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a\"" Oct 2 20:32:30.178000 audit[2698]: NETFILTER_CFG table=mangle:42 family=10 entries=1 op=nft_register_chain pid=2698 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.178000 audit[2698]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffed5d12c10 a2=0 a3=7ffed5d12bfc items=0 ppid=2617 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.178000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:32:30.185000 audit[2700]: NETFILTER_CFG table=mangle:43 family=2 entries=1 op=nft_register_chain pid=2700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.185000 audit[2700]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff123714e0 a2=0 a3=7fff123714cc items=0 ppid=2617 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.185000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:32:30.187000 audit[2701]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=2701 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.187000 audit[2701]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd0b20ae10 a2=0 a3=7ffd0b20adfc items=0 ppid=2617 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.187000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:32:30.188000 audit[2702]: NETFILTER_CFG table=nat:45 family=10 entries=1 op=nft_register_chain pid=2702 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.188000 audit[2702]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffde9299d80 a2=0 a3=7ffde9299d6c items=0 ppid=2617 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.188000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:32:30.189000 audit[2703]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_chain pid=2703 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.189000 audit[2704]: NETFILTER_CFG table=filter:47 family=10 entries=1 op=nft_register_chain pid=2704 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.189000 audit[2704]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffffbf489a0 a2=0 a3=7ffffbf4898c items=0 ppid=2617 pid=2704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.189000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:32:30.189000 audit[2703]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff7afc88c0 a2=0 a3=7fff7afc88ac items=0 ppid=2617 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.189000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:32:30.284000 audit[2705]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_chain pid=2705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.284000 audit[2705]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd6fdd6140 a2=0 a3=7ffd6fdd612c items=0 ppid=2617 pid=2705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.284000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:32:30.288000 audit[2707]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.288000 audit[2707]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff16a01960 a2=0 a3=7fff16a0194c items=0 ppid=2617 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.288000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 20:32:30.292000 audit[2710]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2710 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.292000 audit[2710]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fffcdef50b0 a2=0 a3=7fffcdef509c items=0 ppid=2617 pid=2710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.292000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 20:32:30.293000 audit[2711]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_chain pid=2711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.293000 audit[2711]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffebecc7010 a2=0 a3=7ffebecc6ffc items=0 ppid=2617 pid=2711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.293000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:32:30.296000 audit[2713]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_rule pid=2713 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.296000 audit[2713]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe2a5b6d50 a2=0 a3=7ffe2a5b6d3c items=0 ppid=2617 pid=2713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.296000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:32:30.297000 audit[2714]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_chain pid=2714 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.297000 audit[2714]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffecc52f00 a2=0 a3=7fffecc52eec items=0 ppid=2617 pid=2714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.297000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:32:30.300000 audit[2716]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2716 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.300000 audit[2716]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe264856a0 a2=0 a3=7ffe2648568c items=0 ppid=2617 pid=2716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.300000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:32:30.303000 audit[2719]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2719 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.303000 audit[2719]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff8a8a6e80 a2=0 a3=7fff8a8a6e6c items=0 ppid=2617 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.303000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 20:32:30.305000 audit[2720]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_chain pid=2720 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.305000 audit[2720]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc44373200 a2=0 a3=7ffc443731ec items=0 ppid=2617 pid=2720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.305000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:32:30.308000 audit[2722]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2722 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.308000 audit[2722]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffde4a09130 a2=0 a3=7ffde4a0911c items=0 ppid=2617 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.308000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:32:30.309000 audit[2723]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_chain pid=2723 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.309000 audit[2723]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc07cbb550 a2=0 a3=7ffc07cbb53c items=0 ppid=2617 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.309000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:32:30.312000 audit[2725]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2725 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.312000 audit[2725]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc5f618c80 a2=0 a3=7ffc5f618c6c items=0 ppid=2617 pid=2725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.312000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:32:30.316000 audit[2728]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2728 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.316000 audit[2728]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd522e3ac0 a2=0 a3=7ffd522e3aac items=0 ppid=2617 pid=2728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.316000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:32:30.320000 audit[2731]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_rule pid=2731 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.320000 audit[2731]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd16bce360 a2=0 a3=7ffd16bce34c items=0 ppid=2617 pid=2731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.320000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:32:30.322000 audit[2732]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_chain pid=2732 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.322000 audit[2732]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe34a16870 a2=0 a3=7ffe34a1685c items=0 ppid=2617 pid=2732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.322000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:32:30.324000 audit[2734]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2734 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.324000 audit[2734]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffdf0f39390 a2=0 a3=7ffdf0f3937c items=0 ppid=2617 pid=2734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.324000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:32:30.328000 audit[2737]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_rule pid=2737 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.328000 audit[2737]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe919184a0 a2=0 a3=7ffe9191848c items=0 ppid=2617 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.328000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:32:30.329000 audit[2738]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_chain pid=2738 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.329000 audit[2738]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffee494a380 a2=0 a3=7ffee494a36c items=0 ppid=2617 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.329000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:32:30.331000 audit[2740]: NETFILTER_CFG table=nat:66 family=2 entries=1 op=nft_register_rule pid=2740 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:30.331000 audit[2740]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffcb96e59f0 a2=0 a3=7ffcb96e59dc items=0 ppid=2617 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.331000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:32:30.441000 audit[2746]: NETFILTER_CFG table=filter:67 family=2 entries=8 op=nft_register_rule pid=2746 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:32:30.441000 audit[2746]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffc04aa1520 a2=0 a3=7ffc04aa150c items=0 ppid=2617 pid=2746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.441000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:32:30.464000 audit[2746]: NETFILTER_CFG table=nat:68 family=2 entries=14 op=nft_register_chain pid=2746 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:32:30.464000 audit[2746]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffc04aa1520 a2=0 a3=7ffc04aa150c items=0 ppid=2617 pid=2746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.464000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:32:30.465000 audit[2751]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_chain pid=2751 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.465000 audit[2751]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd7408c150 a2=0 a3=7ffd7408c13c items=0 ppid=2617 pid=2751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.465000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:32:30.469000 audit[2753]: NETFILTER_CFG table=filter:70 family=10 entries=2 op=nft_register_chain pid=2753 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.469000 audit[2753]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffed7a760f0 a2=0 a3=7ffed7a760dc items=0 ppid=2617 pid=2753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.469000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 20:32:30.473000 audit[2756]: NETFILTER_CFG table=filter:71 family=10 entries=2 op=nft_register_chain pid=2756 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.473000 audit[2756]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff3ee0db80 a2=0 a3=7fff3ee0db6c items=0 ppid=2617 pid=2756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.473000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 20:32:30.474000 audit[2757]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_chain pid=2757 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.474000 audit[2757]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe7bcb4790 a2=0 a3=7ffe7bcb477c items=0 ppid=2617 pid=2757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.474000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:32:30.477000 audit[2759]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_rule pid=2759 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.477000 audit[2759]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe091efd60 a2=0 a3=7ffe091efd4c items=0 ppid=2617 pid=2759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.477000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:32:30.478000 audit[2760]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_chain pid=2760 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.478000 audit[2760]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcb214ee50 a2=0 a3=7ffcb214ee3c items=0 ppid=2617 pid=2760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.478000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:32:30.480000 audit[2762]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_rule pid=2762 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.480000 audit[2762]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffceda8bde0 a2=0 a3=7ffceda8bdcc items=0 ppid=2617 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.480000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 20:32:30.484000 audit[2765]: NETFILTER_CFG table=filter:76 family=10 entries=2 op=nft_register_chain pid=2765 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.484000 audit[2765]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd0c59b2c0 a2=0 a3=7ffd0c59b2ac items=0 ppid=2617 pid=2765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.484000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:32:30.485000 audit[2766]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_chain pid=2766 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.485000 audit[2766]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd778357f0 a2=0 a3=7ffd778357dc items=0 ppid=2617 pid=2766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.485000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:32:30.487000 audit[2768]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2768 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.487000 audit[2768]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdb4b907a0 a2=0 a3=7ffdb4b9078c items=0 ppid=2617 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.487000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:32:30.489000 audit[2769]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_chain pid=2769 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.489000 audit[2769]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd009b8590 a2=0 a3=7ffd009b857c items=0 ppid=2617 pid=2769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.489000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:32:30.491000 audit[2771]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2771 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.491000 audit[2771]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffd17dd2c0 a2=0 a3=7fffd17dd2ac items=0 ppid=2617 pid=2771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.491000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:32:30.495000 audit[2774]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2774 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.495000 audit[2774]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc4061efd0 a2=0 a3=7ffc4061efbc items=0 ppid=2617 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.495000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:32:30.499000 audit[2777]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_rule pid=2777 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.499000 audit[2777]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcf9a28e50 a2=0 a3=7ffcf9a28e3c items=0 ppid=2617 pid=2777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.499000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 20:32:30.500000 audit[2778]: NETFILTER_CFG table=nat:83 family=10 entries=1 op=nft_register_chain pid=2778 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.500000 audit[2778]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcc5bec0a0 a2=0 a3=7ffcc5bec08c items=0 ppid=2617 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.500000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:32:30.502000 audit[2780]: NETFILTER_CFG table=nat:84 family=10 entries=2 op=nft_register_chain pid=2780 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.502000 audit[2780]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffcb0798920 a2=0 a3=7ffcb079890c items=0 ppid=2617 pid=2780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.502000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:32:30.505000 audit[2783]: NETFILTER_CFG table=nat:85 family=10 entries=2 op=nft_register_chain pid=2783 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.505000 audit[2783]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffc49f11d80 a2=0 a3=7ffc49f11d6c items=0 ppid=2617 pid=2783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.505000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:32:30.507000 audit[2784]: NETFILTER_CFG table=nat:86 family=10 entries=1 op=nft_register_chain pid=2784 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.507000 audit[2784]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc33652450 a2=0 a3=7ffc3365243c items=0 ppid=2617 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.507000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:32:30.509000 audit[2786]: NETFILTER_CFG table=nat:87 family=10 entries=2 op=nft_register_chain pid=2786 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.509000 audit[2786]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffec2c0f7a0 a2=0 a3=7ffec2c0f78c items=0 ppid=2617 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.509000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:32:30.510000 audit[2787]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_chain pid=2787 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.510000 audit[2787]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc4a576b70 a2=0 a3=7ffc4a576b5c items=0 ppid=2617 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.510000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:32:30.512000 audit[2789]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_rule pid=2789 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.512000 audit[2789]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd589774c0 a2=0 a3=7ffd589774ac items=0 ppid=2617 pid=2789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.512000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:32:30.516000 audit[2792]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2792 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:30.516000 audit[2792]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff560688c0 a2=0 a3=7fff560688ac items=0 ppid=2617 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.516000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:32:30.518000 audit[2794]: NETFILTER_CFG table=filter:91 family=10 entries=3 op=nft_register_rule pid=2794 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:32:30.518000 audit[2794]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffd36ada820 a2=0 a3=7ffd36ada80c items=0 ppid=2617 pid=2794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.518000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:32:30.519000 audit[2794]: NETFILTER_CFG table=nat:92 family=10 entries=7 op=nft_register_chain pid=2794 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:32:30.519000 audit[2794]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffd36ada820 a2=0 a3=7ffd36ada80c items=0 ppid=2617 pid=2794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:30.519000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:32:30.694853 kubelet[2448]: I1002 20:32:30.694743 2448 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-lx72v" podStartSLOduration=1.694654008 podCreationTimestamp="2023-10-02 20:32:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:32:30.694479705 +0000 UTC m=+14.223055095" watchObservedRunningTime="2023-10-02 20:32:30.694654008 +0000 UTC m=+14.223229398" Oct 2 20:32:36.132639 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount785363420.mount: Deactivated successfully. Oct 2 20:32:38.975112 env[1325]: time="2023-10-02T20:32:38.975061991Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:38.982419 env[1325]: time="2023-10-02T20:32:38.982373181Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:38.988029 env[1325]: time="2023-10-02T20:32:38.987966450Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:38.988609 env[1325]: time="2023-10-02T20:32:38.988573057Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 20:32:38.990150 env[1325]: time="2023-10-02T20:32:38.990118076Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 20:32:38.991339 env[1325]: time="2023-10-02T20:32:38.991307291Z" level=info msg="CreateContainer within sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:32:39.043131 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount606482777.mount: Deactivated successfully. Oct 2 20:32:39.050143 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount847215044.mount: Deactivated successfully. Oct 2 20:32:39.075683 env[1325]: time="2023-10-02T20:32:39.075627008Z" level=info msg="CreateContainer within sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648\"" Oct 2 20:32:39.076237 env[1325]: time="2023-10-02T20:32:39.076208115Z" level=info msg="StartContainer for \"df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648\"" Oct 2 20:32:39.097706 systemd[1]: Started cri-containerd-df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648.scope. Oct 2 20:32:39.109502 systemd[1]: cri-containerd-df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648.scope: Deactivated successfully. Oct 2 20:32:40.040050 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648-rootfs.mount: Deactivated successfully. Oct 2 20:32:41.103159 env[1325]: time="2023-10-02T20:32:41.103036432Z" level=error msg="get state for df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648" error="context deadline exceeded: unknown" Oct 2 20:32:41.103159 env[1325]: time="2023-10-02T20:32:41.103145533Z" level=warning msg="unknown status" status=0 Oct 2 20:32:42.773724 env[1325]: time="2023-10-02T20:32:42.773671405Z" level=info msg="shim disconnected" id=df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648 Oct 2 20:32:42.774225 env[1325]: time="2023-10-02T20:32:42.773717605Z" level=warning msg="cleaning up after shim disconnected" id=df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648 namespace=k8s.io Oct 2 20:32:42.774225 env[1325]: time="2023-10-02T20:32:42.773741805Z" level=info msg="cleaning up dead shim" Oct 2 20:32:42.782166 env[1325]: time="2023-10-02T20:32:42.782124601Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:32:42Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2820 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:32:42Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:32:42.782474 env[1325]: time="2023-10-02T20:32:42.782375803Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 20:32:42.784593 env[1325]: time="2023-10-02T20:32:42.784545228Z" level=error msg="Failed to pipe stderr of container \"df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648\"" error="reading from a closed fifo" Oct 2 20:32:42.786179 env[1325]: time="2023-10-02T20:32:42.784575528Z" level=error msg="Failed to pipe stdout of container \"df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648\"" error="reading from a closed fifo" Oct 2 20:32:42.794585 env[1325]: time="2023-10-02T20:32:42.794536842Z" level=error msg="StartContainer for \"df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:32:42.794826 kubelet[2448]: E1002 20:32:42.794794 2448 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648" Oct 2 20:32:42.795220 kubelet[2448]: E1002 20:32:42.794953 2448 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:32:42.795220 kubelet[2448]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:32:42.795220 kubelet[2448]: rm /hostbin/cilium-mount Oct 2 20:32:42.795530 kubelet[2448]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9mjss,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:32:42.795530 kubelet[2448]: E1002 20:32:42.795041 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:32:43.529956 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4012093350.mount: Deactivated successfully. Oct 2 20:32:43.717739 env[1325]: time="2023-10-02T20:32:43.717686975Z" level=info msg="CreateContainer within sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:32:43.901513 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1708704453.mount: Deactivated successfully. Oct 2 20:32:43.924519 env[1325]: time="2023-10-02T20:32:43.924470880Z" level=info msg="CreateContainer within sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209\"" Oct 2 20:32:43.925516 env[1325]: time="2023-10-02T20:32:43.925486892Z" level=info msg="StartContainer for \"f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209\"" Oct 2 20:32:43.961233 systemd[1]: Started cri-containerd-f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209.scope. Oct 2 20:32:43.975506 systemd[1]: cri-containerd-f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209.scope: Deactivated successfully. Oct 2 20:32:44.026561 env[1325]: time="2023-10-02T20:32:44.026502512Z" level=info msg="shim disconnected" id=f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209 Oct 2 20:32:44.026561 env[1325]: time="2023-10-02T20:32:44.026558113Z" level=warning msg="cleaning up after shim disconnected" id=f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209 namespace=k8s.io Oct 2 20:32:44.026561 env[1325]: time="2023-10-02T20:32:44.026568213Z" level=info msg="cleaning up dead shim" Oct 2 20:32:44.047952 env[1325]: time="2023-10-02T20:32:44.047897546Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:32:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2858 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:32:44Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:32:44.048442 env[1325]: time="2023-10-02T20:32:44.048376152Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 20:32:44.048817 env[1325]: time="2023-10-02T20:32:44.048780056Z" level=error msg="Failed to pipe stdout of container \"f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209\"" error="reading from a closed fifo" Oct 2 20:32:44.049011 env[1325]: time="2023-10-02T20:32:44.048964558Z" level=error msg="Failed to pipe stderr of container \"f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209\"" error="reading from a closed fifo" Oct 2 20:32:44.054258 env[1325]: time="2023-10-02T20:32:44.054217715Z" level=error msg="StartContainer for \"f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:32:44.055082 kubelet[2448]: E1002 20:32:44.054580 2448 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209" Oct 2 20:32:44.055082 kubelet[2448]: E1002 20:32:44.054704 2448 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:32:44.055082 kubelet[2448]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:32:44.055082 kubelet[2448]: rm /hostbin/cilium-mount Oct 2 20:32:44.055082 kubelet[2448]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9mjss,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:32:44.055082 kubelet[2448]: E1002 20:32:44.054751 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:32:44.523391 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2983815988.mount: Deactivated successfully. Oct 2 20:32:44.576075 env[1325]: time="2023-10-02T20:32:44.576025124Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:44.581156 env[1325]: time="2023-10-02T20:32:44.581118280Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:44.586221 env[1325]: time="2023-10-02T20:32:44.586188536Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:44.586613 env[1325]: time="2023-10-02T20:32:44.586582740Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 20:32:44.588895 env[1325]: time="2023-10-02T20:32:44.588861865Z" level=info msg="CreateContainer within sandbox \"841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 20:32:44.627348 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3615879709.mount: Deactivated successfully. Oct 2 20:32:44.643537 env[1325]: time="2023-10-02T20:32:44.643488463Z" level=info msg="CreateContainer within sandbox \"841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814\"" Oct 2 20:32:44.645729 env[1325]: time="2023-10-02T20:32:44.644070869Z" level=info msg="StartContainer for \"82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814\"" Oct 2 20:32:44.663262 systemd[1]: Started cri-containerd-82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814.scope. Oct 2 20:32:44.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.683102 kernel: kauditd_printk_skb: 369 callbacks suppressed Oct 2 20:32:44.683201 kernel: audit: type=1400 audit(1696278764.677:1063): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.709501 kernel: audit: type=1400 audit(1696278764.677:1064): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.722178 kernel: audit: type=1400 audit(1696278764.677:1065): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.753699 kernel: audit: type=1400 audit(1696278764.677:1066): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.770557 kernel: audit: type=1400 audit(1696278764.677:1067): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.770711 env[1325]: time="2023-10-02T20:32:44.730052810Z" level=info msg="RemoveContainer for \"df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648\"" Oct 2 20:32:44.770711 env[1325]: time="2023-10-02T20:32:44.730514315Z" level=info msg="RemoveContainer for \"df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648\"" Oct 2 20:32:44.770711 env[1325]: time="2023-10-02T20:32:44.730593316Z" level=error msg="RemoveContainer for \"df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648\" failed" error="failed to set removing state for container \"df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648\": container is already in removing state" Oct 2 20:32:44.770711 env[1325]: time="2023-10-02T20:32:44.766404707Z" level=info msg="RemoveContainer for \"df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648\" returns successfully" Oct 2 20:32:44.770918 kubelet[2448]: I1002 20:32:44.725187 2448 scope.go:117] "RemoveContainer" containerID="df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648" Oct 2 20:32:44.770918 kubelet[2448]: I1002 20:32:44.725714 2448 scope.go:117] "RemoveContainer" containerID="df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648" Oct 2 20:32:44.770918 kubelet[2448]: E1002 20:32:44.741944 2448 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648\": container is already in removing state" containerID="df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648" Oct 2 20:32:44.770918 kubelet[2448]: E1002 20:32:44.742007 2448 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648": container is already in removing state; Skipping pod "cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)" Oct 2 20:32:44.770918 kubelet[2448]: E1002 20:32:44.742274 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:32:44.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.786611 kernel: audit: type=1400 audit(1696278764.677:1068): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.800726 kernel: audit: type=1400 audit(1696278764.677:1069): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.800888 env[1325]: time="2023-10-02T20:32:44.788720851Z" level=info msg="StartContainer for \"82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814\" returns successfully" Oct 2 20:32:44.815712 kernel: audit: type=1400 audit(1696278764.677:1070): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.830131 kernel: audit: type=1400 audit(1696278764.677:1071): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.677000 audit: BPF prog-id=122 op=LOAD Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { bpf } for pid=2878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.844056 kernel: audit: type=1400 audit(1696278764.677:1072): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2641 pid=2878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:44.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832626162326563613136376533373939383934333962346139376266 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { perfmon } for pid=2878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2641 pid=2878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:44.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832626162326563613136376533373939383934333962346139376266 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { bpf } for pid=2878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { bpf } for pid=2878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { bpf } for pid=2878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { perfmon } for pid=2878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { perfmon } for pid=2878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { perfmon } for pid=2878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { perfmon } for pid=2878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { perfmon } for pid=2878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { bpf } for pid=2878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { bpf } for pid=2878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit: BPF prog-id=123 op=LOAD Oct 2 20:32:44.695000 audit[2878]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003141d0 items=0 ppid=2641 pid=2878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:44.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832626162326563613136376533373939383934333962346139376266 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { bpf } for pid=2878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { bpf } for pid=2878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { perfmon } for pid=2878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { perfmon } for pid=2878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { perfmon } for pid=2878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { perfmon } for pid=2878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { perfmon } for pid=2878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { bpf } for pid=2878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { bpf } for pid=2878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit: BPF prog-id=124 op=LOAD Oct 2 20:32:44.695000 audit[2878]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000314218 items=0 ppid=2641 pid=2878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:44.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832626162326563613136376533373939383934333962346139376266 Oct 2 20:32:44.695000 audit: BPF prog-id=124 op=UNLOAD Oct 2 20:32:44.695000 audit: BPF prog-id=123 op=UNLOAD Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { bpf } for pid=2878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { bpf } for pid=2878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { bpf } for pid=2878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { perfmon } for pid=2878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { perfmon } for pid=2878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { perfmon } for pid=2878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { perfmon } for pid=2878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { perfmon } for pid=2878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { bpf } for pid=2878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit[2878]: AVC avc: denied { bpf } for pid=2878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:44.695000 audit: BPF prog-id=125 op=LOAD Oct 2 20:32:44.695000 audit[2878]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000314628 items=0 ppid=2641 pid=2878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:44.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3832626162326563613136376533373939383934333962346139376266 Oct 2 20:32:44.821000 audit[2889]: AVC avc: denied { map_create } for pid=2889 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c137,c585 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c137,c585 tclass=bpf permissive=0 Oct 2 20:32:44.821000 audit[2889]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c00069b7d0 a2=48 a3=0 items=0 ppid=2641 pid=2889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c137,c585 key=(null) Oct 2 20:32:44.821000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 20:32:45.763048 kubelet[2448]: E1002 20:32:45.762990 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:32:45.770217 kubelet[2448]: I1002 20:32:45.770187 2448 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-6bc8ccdb58-xqb86" podStartSLOduration=2.349800038 podCreationTimestamp="2023-10-02 20:32:29 +0000 UTC" firstStartedPulling="2023-10-02 20:32:30.166581646 +0000 UTC m=+13.695157036" lastFinishedPulling="2023-10-02 20:32:44.586916344 +0000 UTC m=+28.115491734" observedRunningTime="2023-10-02 20:32:45.769718331 +0000 UTC m=+29.298293821" watchObservedRunningTime="2023-10-02 20:32:45.770134736 +0000 UTC m=+29.298710126" Oct 2 20:32:45.777922 kubelet[2448]: W1002 20:32:45.777885 2448 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod788f4114_8c97_4ea0_ba33_c33540486cf1.slice/cri-containerd-df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648.scope WatchSource:0}: container "df3019408fb83d69250123b113813339869cf1b49f5373ef0df0feb783236648" in namespace "k8s.io": not found Oct 2 20:32:48.885568 kubelet[2448]: W1002 20:32:48.885505 2448 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod788f4114_8c97_4ea0_ba33_c33540486cf1.slice/cri-containerd-f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209.scope WatchSource:0}: task f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209 not found: not found Oct 2 20:32:56.633079 env[1325]: time="2023-10-02T20:32:56.632744591Z" level=info msg="CreateContainer within sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:32:56.662962 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount466515091.mount: Deactivated successfully. Oct 2 20:32:56.678449 env[1325]: time="2023-10-02T20:32:56.678397098Z" level=info msg="CreateContainer within sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171\"" Oct 2 20:32:56.679571 env[1325]: time="2023-10-02T20:32:56.679538908Z" level=info msg="StartContainer for \"c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171\"" Oct 2 20:32:56.704539 systemd[1]: Started cri-containerd-c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171.scope. Oct 2 20:32:56.717514 systemd[1]: cri-containerd-c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171.scope: Deactivated successfully. Oct 2 20:32:57.135105 env[1325]: time="2023-10-02T20:32:57.135048753Z" level=info msg="shim disconnected" id=c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171 Oct 2 20:32:57.135105 env[1325]: time="2023-10-02T20:32:57.135101054Z" level=warning msg="cleaning up after shim disconnected" id=c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171 namespace=k8s.io Oct 2 20:32:57.135105 env[1325]: time="2023-10-02T20:32:57.135113754Z" level=info msg="cleaning up dead shim" Oct 2 20:32:57.143054 env[1325]: time="2023-10-02T20:32:57.142985423Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:32:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2934 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:32:57Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:32:57.143357 env[1325]: time="2023-10-02T20:32:57.143295726Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 20:32:57.143838 env[1325]: time="2023-10-02T20:32:57.143791530Z" level=error msg="Failed to pipe stderr of container \"c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171\"" error="reading from a closed fifo" Oct 2 20:32:57.144121 env[1325]: time="2023-10-02T20:32:57.144085233Z" level=error msg="Failed to pipe stdout of container \"c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171\"" error="reading from a closed fifo" Oct 2 20:32:57.155351 env[1325]: time="2023-10-02T20:32:57.155285331Z" level=error msg="StartContainer for \"c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:32:57.155588 kubelet[2448]: E1002 20:32:57.155562 2448 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171" Oct 2 20:32:57.155966 kubelet[2448]: E1002 20:32:57.155696 2448 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:32:57.155966 kubelet[2448]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:32:57.155966 kubelet[2448]: rm /hostbin/cilium-mount Oct 2 20:32:57.155966 kubelet[2448]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9mjss,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:32:57.155966 kubelet[2448]: E1002 20:32:57.155765 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:32:57.660513 systemd[1]: run-containerd-runc-k8s.io-c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171-runc.2ZqpTe.mount: Deactivated successfully. Oct 2 20:32:57.660657 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171-rootfs.mount: Deactivated successfully. Oct 2 20:32:57.787546 kubelet[2448]: I1002 20:32:57.787519 2448 scope.go:117] "RemoveContainer" containerID="f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209" Oct 2 20:32:57.789267 kubelet[2448]: I1002 20:32:57.788107 2448 scope.go:117] "RemoveContainer" containerID="f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209" Oct 2 20:32:57.789394 env[1325]: time="2023-10-02T20:32:57.789342302Z" level=info msg="RemoveContainer for \"f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209\"" Oct 2 20:32:57.790683 env[1325]: time="2023-10-02T20:32:57.790046808Z" level=info msg="RemoveContainer for \"f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209\"" Oct 2 20:32:57.790683 env[1325]: time="2023-10-02T20:32:57.790133909Z" level=error msg="RemoveContainer for \"f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209\" failed" error="failed to set removing state for container \"f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209\": container is already in removing state" Oct 2 20:32:57.790784 kubelet[2448]: E1002 20:32:57.790281 2448 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209\": container is already in removing state" containerID="f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209" Oct 2 20:32:57.790784 kubelet[2448]: E1002 20:32:57.790313 2448 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209": container is already in removing state; Skipping pod "cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)" Oct 2 20:32:57.790784 kubelet[2448]: E1002 20:32:57.790667 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:32:57.801588 env[1325]: time="2023-10-02T20:32:57.801436708Z" level=info msg="RemoveContainer for \"f7b1397a0e061256930832eaa76935373037567150776df2ad54f02c51f94209\" returns successfully" Oct 2 20:33:00.240734 kubelet[2448]: W1002 20:33:00.240673 2448 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod788f4114_8c97_4ea0_ba33_c33540486cf1.slice/cri-containerd-c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171.scope WatchSource:0}: task c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171 not found: not found Oct 2 20:33:12.628792 kubelet[2448]: E1002 20:33:12.628747 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:33:13.182000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:13.188241 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 20:33:13.188375 kernel: audit: type=1400 audit(1696278793.182:1082): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:13.182000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:13.224466 kernel: audit: type=1400 audit(1696278793.182:1083): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:13.224608 kernel: audit: type=1300 audit(1696278793.182:1083): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ff6ee0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:33:13.182000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ff6ee0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:33:13.247101 kernel: audit: type=1327 audit(1696278793.182:1083): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:13.182000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:13.182000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014f4f90 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:33:13.293992 kernel: audit: type=1300 audit(1696278793.182:1082): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014f4f90 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:33:13.294162 kernel: audit: type=1327 audit(1696278793.182:1082): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:13.182000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:13.227000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:13.329199 kernel: audit: type=1400 audit(1696278793.227:1084): avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:13.227000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00b4b0220 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:33:13.350202 kernel: audit: type=1300 audit(1696278793.227:1084): arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00b4b0220 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:33:13.350337 kernel: audit: type=1327 audit(1696278793.227:1084): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:33:13.227000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:33:13.227000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:13.385019 kernel: audit: type=1400 audit(1696278793.227:1085): avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:13.227000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c008af8cf0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:33:13.227000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:33:13.236000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:13.236000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c006ab2b40 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:33:13.236000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:33:13.304000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:13.304000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c004a892c0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:33:13.304000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:33:13.304000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:13.304000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c008af8ed0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:33:13.304000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:33:13.312000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:13.312000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c006ab2d50 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:33:13.312000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:33:23.631709 env[1325]: time="2023-10-02T20:33:23.631641924Z" level=info msg="CreateContainer within sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:33:23.662300 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3469700550.mount: Deactivated successfully. Oct 2 20:33:23.683856 env[1325]: time="2023-10-02T20:33:23.683802259Z" level=info msg="CreateContainer within sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d\"" Oct 2 20:33:23.691590 env[1325]: time="2023-10-02T20:33:23.691532708Z" level=info msg="StartContainer for \"62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d\"" Oct 2 20:33:23.717492 systemd[1]: Started cri-containerd-62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d.scope. Oct 2 20:33:23.728822 systemd[1]: cri-containerd-62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d.scope: Deactivated successfully. Oct 2 20:33:23.749221 env[1325]: time="2023-10-02T20:33:23.749163178Z" level=info msg="shim disconnected" id=62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d Oct 2 20:33:23.749221 env[1325]: time="2023-10-02T20:33:23.749219478Z" level=warning msg="cleaning up after shim disconnected" id=62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d namespace=k8s.io Oct 2 20:33:23.749540 env[1325]: time="2023-10-02T20:33:23.749231878Z" level=info msg="cleaning up dead shim" Oct 2 20:33:23.757810 env[1325]: time="2023-10-02T20:33:23.757748733Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:33:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2976 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:33:23Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:33:23.758108 env[1325]: time="2023-10-02T20:33:23.758046935Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 20:33:23.758329 env[1325]: time="2023-10-02T20:33:23.758289637Z" level=error msg="Failed to pipe stdout of container \"62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d\"" error="reading from a closed fifo" Oct 2 20:33:23.758483 env[1325]: time="2023-10-02T20:33:23.758440638Z" level=error msg="Failed to pipe stderr of container \"62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d\"" error="reading from a closed fifo" Oct 2 20:33:23.762707 env[1325]: time="2023-10-02T20:33:23.762654565Z" level=error msg="StartContainer for \"62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:33:23.762969 kubelet[2448]: E1002 20:33:23.762946 2448 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d" Oct 2 20:33:23.763340 kubelet[2448]: E1002 20:33:23.763101 2448 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:33:23.763340 kubelet[2448]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:33:23.763340 kubelet[2448]: rm /hostbin/cilium-mount Oct 2 20:33:23.763340 kubelet[2448]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9mjss,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:33:23.763340 kubelet[2448]: E1002 20:33:23.763159 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:33:23.837291 kubelet[2448]: I1002 20:33:23.837246 2448 scope.go:117] "RemoveContainer" containerID="c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171" Oct 2 20:33:23.837724 kubelet[2448]: I1002 20:33:23.837697 2448 scope.go:117] "RemoveContainer" containerID="c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171" Oct 2 20:33:23.845021 env[1325]: time="2023-10-02T20:33:23.842553277Z" level=info msg="RemoveContainer for \"c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171\"" Oct 2 20:33:23.848964 env[1325]: time="2023-10-02T20:33:23.848918618Z" level=info msg="RemoveContainer for \"c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171\"" Oct 2 20:33:23.849099 env[1325]: time="2023-10-02T20:33:23.849049019Z" level=error msg="RemoveContainer for \"c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171\" failed" error="failed to set removing state for container \"c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171\": container is already in removing state" Oct 2 20:33:23.849227 kubelet[2448]: E1002 20:33:23.849207 2448 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171\": container is already in removing state" containerID="c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171" Oct 2 20:33:23.849314 kubelet[2448]: E1002 20:33:23.849246 2448 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171": container is already in removing state; Skipping pod "cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)" Oct 2 20:33:23.849612 kubelet[2448]: E1002 20:33:23.849594 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:33:23.856318 env[1325]: time="2023-10-02T20:33:23.856284365Z" level=info msg="RemoveContainer for \"c13c34ce991884f86475f6b47a0815ef1a1837b26eb091064797752ca370f171\" returns successfully" Oct 2 20:33:24.659420 systemd[1]: run-containerd-runc-k8s.io-62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d-runc.8jib6z.mount: Deactivated successfully. Oct 2 20:33:24.659563 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d-rootfs.mount: Deactivated successfully. Oct 2 20:33:26.855373 kubelet[2448]: W1002 20:33:26.855334 2448 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod788f4114_8c97_4ea0_ba33_c33540486cf1.slice/cri-containerd-62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d.scope WatchSource:0}: task 62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d not found: not found Oct 2 20:33:28.092025 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:33:28.092164 kernel: audit: type=1400 audit(1696278808.085:1091): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:28.085000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:28.126037 kernel: audit: type=1400 audit(1696278808.085:1090): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:28.085000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:28.141332 kernel: audit: type=1300 audit(1696278808.085:1091): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e7cd80 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:33:28.085000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e7cd80 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:33:28.085000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:28.182192 kernel: audit: type=1327 audit(1696278808.085:1091): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:28.182328 kernel: audit: type=1400 audit(1696278808.086:1092): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:28.086000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:28.086000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e7cfc0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:33:28.219912 kernel: audit: type=1300 audit(1696278808.086:1092): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e7cfc0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:33:28.220073 kernel: audit: type=1327 audit(1696278808.086:1092): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:28.086000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:28.085000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d79a80 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:33:28.238019 kernel: audit: type=1300 audit(1696278808.085:1090): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d79a80 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:33:28.085000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:28.089000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:28.292957 kernel: audit: type=1327 audit(1696278808.085:1090): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:28.293129 kernel: audit: type=1400 audit(1696278808.089:1093): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:28.089000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d79ac0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:33:28.089000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:38.629442 kubelet[2448]: E1002 20:33:38.629328 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:33:50.631248 kubelet[2448]: E1002 20:33:50.631200 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:34:05.631493 env[1325]: time="2023-10-02T20:34:05.631441254Z" level=info msg="CreateContainer within sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 20:34:05.659019 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1354124754.mount: Deactivated successfully. Oct 2 20:34:05.667876 env[1325]: time="2023-10-02T20:34:05.667825371Z" level=info msg="CreateContainer within sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a\"" Oct 2 20:34:05.668802 env[1325]: time="2023-10-02T20:34:05.668772408Z" level=info msg="StartContainer for \"29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a\"" Oct 2 20:34:05.691932 systemd[1]: Started cri-containerd-29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a.scope. Oct 2 20:34:05.702222 systemd[1]: cri-containerd-29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a.scope: Deactivated successfully. Oct 2 20:34:05.707813 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a-rootfs.mount: Deactivated successfully. Oct 2 20:34:05.737571 env[1325]: time="2023-10-02T20:34:05.737516286Z" level=info msg="shim disconnected" id=29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a Oct 2 20:34:05.737571 env[1325]: time="2023-10-02T20:34:05.737566988Z" level=warning msg="cleaning up after shim disconnected" id=29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a namespace=k8s.io Oct 2 20:34:05.737571 env[1325]: time="2023-10-02T20:34:05.737578188Z" level=info msg="cleaning up dead shim" Oct 2 20:34:05.745705 env[1325]: time="2023-10-02T20:34:05.745644602Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:34:05Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3018 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:34:05Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:34:05.746015 env[1325]: time="2023-10-02T20:34:05.745929513Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 20:34:05.747048 env[1325]: time="2023-10-02T20:34:05.746986554Z" level=error msg="Failed to pipe stderr of container \"29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a\"" error="reading from a closed fifo" Oct 2 20:34:05.749343 env[1325]: time="2023-10-02T20:34:05.749296344Z" level=error msg="Failed to pipe stdout of container \"29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a\"" error="reading from a closed fifo" Oct 2 20:34:05.754293 env[1325]: time="2023-10-02T20:34:05.754243237Z" level=error msg="StartContainer for \"29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:34:05.754610 kubelet[2448]: E1002 20:34:05.754586 2448 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a" Oct 2 20:34:05.754969 kubelet[2448]: E1002 20:34:05.754710 2448 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:34:05.754969 kubelet[2448]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:34:05.754969 kubelet[2448]: rm /hostbin/cilium-mount Oct 2 20:34:05.754969 kubelet[2448]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9mjss,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:34:05.754969 kubelet[2448]: E1002 20:34:05.754763 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:34:05.914936 kubelet[2448]: I1002 20:34:05.913190 2448 scope.go:117] "RemoveContainer" containerID="62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d" Oct 2 20:34:05.914936 kubelet[2448]: I1002 20:34:05.913597 2448 scope.go:117] "RemoveContainer" containerID="62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d" Oct 2 20:34:05.921021 env[1325]: time="2023-10-02T20:34:05.918340128Z" level=info msg="RemoveContainer for \"62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d\"" Oct 2 20:34:05.921021 env[1325]: time="2023-10-02T20:34:05.918941551Z" level=info msg="RemoveContainer for \"62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d\"" Oct 2 20:34:05.921021 env[1325]: time="2023-10-02T20:34:05.919055456Z" level=error msg="RemoveContainer for \"62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d\" failed" error="failed to set removing state for container \"62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d\": container is already in removing state" Oct 2 20:34:05.921257 kubelet[2448]: E1002 20:34:05.919223 2448 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d\": container is already in removing state" containerID="62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d" Oct 2 20:34:05.921257 kubelet[2448]: E1002 20:34:05.919255 2448 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d": container is already in removing state; Skipping pod "cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)" Oct 2 20:34:05.921257 kubelet[2448]: E1002 20:34:05.919588 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:34:05.931326 env[1325]: time="2023-10-02T20:34:05.931270831Z" level=info msg="RemoveContainer for \"62a0af330f11fd3963216f3e539b0ea51d4f4f52f175ebc013dc99d7d03a052d\" returns successfully" Oct 2 20:34:08.842762 kubelet[2448]: W1002 20:34:08.842715 2448 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod788f4114_8c97_4ea0_ba33_c33540486cf1.slice/cri-containerd-29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a.scope WatchSource:0}: task 29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a not found: not found Oct 2 20:34:13.184000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:13.188819 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:34:13.188952 kernel: audit: type=1400 audit(1696278853.184:1094): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:13.184000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:13.222176 kernel: audit: type=1400 audit(1696278853.184:1095): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:13.222312 kernel: audit: type=1300 audit(1696278853.184:1095): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002048c60 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:34:13.184000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002048c60 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:34:13.184000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:13.260719 kernel: audit: type=1327 audit(1696278853.184:1095): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:13.260867 kernel: audit: type=1300 audit(1696278853.184:1094): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002524460 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:34:13.184000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002524460 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:34:13.184000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:13.299494 kernel: audit: type=1327 audit(1696278853.184:1094): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:13.300125 kernel: audit: type=1400 audit(1696278853.228:1096): avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:13.228000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:13.317393 kernel: audit: type=1300 audit(1696278853.228:1096): arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c007a0c690 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:34:13.228000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c007a0c690 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:34:13.228000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:34:13.354694 kernel: audit: type=1327 audit(1696278853.228:1096): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:34:13.354861 kernel: audit: type=1400 audit(1696278853.228:1097): avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:13.228000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:13.228000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00a8bb4c0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:34:13.228000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:34:13.236000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:13.236000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c007a0c750 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:34:13.236000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:34:13.316000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:13.316000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:13.316000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c007d4a0f0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:34:13.316000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c007a0c930 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:34:13.316000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:34:13.316000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:34:13.316000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:13.316000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00a8bb5e0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:34:13.316000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:34:16.625917 kubelet[2448]: E1002 20:34:16.625879 2448 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 20:34:16.793152 kubelet[2448]: E1002 20:34:16.793115 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:34:18.629043 kubelet[2448]: E1002 20:34:18.628981 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:34:21.794924 kubelet[2448]: E1002 20:34:21.794881 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:34:26.796618 kubelet[2448]: E1002 20:34:26.796575 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:34:28.085000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:28.091131 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:34:28.091228 kernel: audit: type=1400 audit(1696278868.085:1102): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:28.085000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002524a20 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:34:28.147970 kernel: audit: type=1300 audit(1696278868.085:1102): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002524a20 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:34:28.085000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:28.165980 kernel: audit: type=1327 audit(1696278868.085:1102): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:28.166123 kernel: audit: type=1400 audit(1696278868.091:1103): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:28.091000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:28.091000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00138c5c0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:34:28.203332 kernel: audit: type=1300 audit(1696278868.091:1103): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00138c5c0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:34:28.203481 kernel: audit: type=1327 audit(1696278868.091:1103): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:28.091000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:28.231034 kernel: audit: type=1400 audit(1696278868.091:1104): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:28.091000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:28.091000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00138c5e0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:34:28.262068 kernel: audit: type=1300 audit(1696278868.091:1104): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00138c5e0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:34:28.262199 kernel: audit: type=1327 audit(1696278868.091:1104): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:28.091000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:28.091000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:28.280017 kernel: audit: type=1400 audit(1696278868.091:1105): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:28.091000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002524b40 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:34:28.091000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:30.629148 kubelet[2448]: E1002 20:34:30.629102 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:34:31.797549 kubelet[2448]: E1002 20:34:31.797512 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:34:36.798862 kubelet[2448]: E1002 20:34:36.798801 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:34:41.799628 kubelet[2448]: E1002 20:34:41.799591 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:34:43.628966 kubelet[2448]: E1002 20:34:43.628918 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:34:45.285022 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:34:45.285213 kernel: audit: type=1130 audit(1696278885.278:1106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.16:22-10.200.12.6:53510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:34:45.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.16:22-10.200.12.6:53510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:34:45.279402 systemd[1]: Started sshd@7-10.200.8.16:22-10.200.12.6:53510.service. Oct 2 20:34:45.921000 audit[3036]: USER_ACCT pid=3036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:45.941274 sshd[3036]: Accepted publickey for core from 10.200.12.6 port 53510 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:34:45.941749 sshd[3036]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:34:45.942654 kernel: audit: type=1101 audit(1696278885.921:1107): pid=3036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:45.942723 kernel: audit: type=1103 audit(1696278885.940:1108): pid=3036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:45.940000 audit[3036]: CRED_ACQ pid=3036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:45.947457 systemd[1]: Started session-10.scope. Oct 2 20:34:45.949082 systemd-logind[1309]: New session 10 of user core. Oct 2 20:34:45.969328 kernel: audit: type=1006 audit(1696278885.940:1109): pid=3036 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 20:34:45.969470 kernel: audit: type=1300 audit(1696278885.940:1109): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffdda92320 a2=3 a3=0 items=0 ppid=1 pid=3036 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:34:45.940000 audit[3036]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffdda92320 a2=3 a3=0 items=0 ppid=1 pid=3036 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:34:45.940000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:34:45.987070 kernel: audit: type=1327 audit(1696278885.940:1109): proctitle=737368643A20636F7265205B707269765D Oct 2 20:34:45.952000 audit[3036]: USER_START pid=3036 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:45.952000 audit[3038]: CRED_ACQ pid=3038 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:46.029134 kernel: audit: type=1105 audit(1696278885.952:1110): pid=3036 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:46.029304 kernel: audit: type=1103 audit(1696278885.952:1111): pid=3038 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:46.491133 sshd[3036]: pam_unix(sshd:session): session closed for user core Oct 2 20:34:46.491000 audit[3036]: USER_END pid=3036 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:46.494707 systemd[1]: sshd@7-10.200.8.16:22-10.200.12.6:53510.service: Deactivated successfully. Oct 2 20:34:46.495537 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 20:34:46.496918 systemd-logind[1309]: Session 10 logged out. Waiting for processes to exit. Oct 2 20:34:46.497820 systemd-logind[1309]: Removed session 10. Oct 2 20:34:46.491000 audit[3036]: CRED_DISP pid=3036 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:46.528912 kernel: audit: type=1106 audit(1696278886.491:1112): pid=3036 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:46.529148 kernel: audit: type=1104 audit(1696278886.491:1113): pid=3036 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:46.491000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.16:22-10.200.12.6:53510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:34:46.800714 kubelet[2448]: E1002 20:34:46.800679 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:34:51.802335 kubelet[2448]: E1002 20:34:51.802295 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:34:54.629429 kubelet[2448]: E1002 20:34:54.629382 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:34:56.596000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.16:22-10.200.12.6:33778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:34:56.597496 systemd[1]: Started sshd@8-10.200.8.16:22-10.200.12.6:33778.service. Oct 2 20:34:56.602858 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:34:56.602935 kernel: audit: type=1130 audit(1696278896.596:1115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.16:22-10.200.12.6:33778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:34:56.803337 kubelet[2448]: E1002 20:34:56.803302 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:34:57.231000 audit[3049]: USER_ACCT pid=3049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:57.232811 sshd[3049]: Accepted publickey for core from 10.200.12.6 port 33778 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:34:57.251000 audit[3049]: CRED_ACQ pid=3049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:57.253254 sshd[3049]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:34:57.258453 systemd[1]: Started session-11.scope. Oct 2 20:34:57.259977 systemd-logind[1309]: New session 11 of user core. Oct 2 20:34:57.269926 kernel: audit: type=1101 audit(1696278897.231:1116): pid=3049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:57.270085 kernel: audit: type=1103 audit(1696278897.251:1117): pid=3049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:57.270125 kernel: audit: type=1006 audit(1696278897.251:1118): pid=3049 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 20:34:57.251000 audit[3049]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2c983c40 a2=3 a3=0 items=0 ppid=1 pid=3049 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:34:57.297607 kernel: audit: type=1300 audit(1696278897.251:1118): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2c983c40 a2=3 a3=0 items=0 ppid=1 pid=3049 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:34:57.297712 kernel: audit: type=1327 audit(1696278897.251:1118): proctitle=737368643A20636F7265205B707269765D Oct 2 20:34:57.251000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:34:57.304339 kernel: audit: type=1105 audit(1696278897.265:1119): pid=3049 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:57.265000 audit[3049]: USER_START pid=3049 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:57.267000 audit[3051]: CRED_ACQ pid=3051 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:57.323064 kernel: audit: type=1103 audit(1696278897.267:1120): pid=3051 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:57.730785 sshd[3049]: pam_unix(sshd:session): session closed for user core Oct 2 20:34:57.731000 audit[3049]: USER_END pid=3049 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:57.734272 systemd-logind[1309]: Session 11 logged out. Waiting for processes to exit. Oct 2 20:34:57.735647 systemd[1]: sshd@8-10.200.8.16:22-10.200.12.6:33778.service: Deactivated successfully. Oct 2 20:34:57.736361 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 20:34:57.738083 systemd-logind[1309]: Removed session 11. Oct 2 20:34:57.731000 audit[3049]: CRED_DISP pid=3049 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:57.769554 kernel: audit: type=1106 audit(1696278897.731:1121): pid=3049 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:57.769671 kernel: audit: type=1104 audit(1696278897.731:1122): pid=3049 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:34:57.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.16:22-10.200.12.6:33778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:01.804331 kubelet[2448]: E1002 20:35:01.804288 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:05.628313 kubelet[2448]: E1002 20:35:05.628261 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:35:06.805933 kubelet[2448]: E1002 20:35:06.805896 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:07.836959 systemd[1]: Started sshd@9-10.200.8.16:22-10.200.12.6:39010.service. Oct 2 20:35:07.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.16:22-10.200.12.6:39010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:07.847153 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:35:07.847247 kernel: audit: type=1130 audit(1696278907.841:1124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.16:22-10.200.12.6:39010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:08.465000 audit[3064]: USER_ACCT pid=3064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:08.466729 sshd[3064]: Accepted publickey for core from 10.200.12.6 port 39010 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:35:08.483000 audit[3064]: CRED_ACQ pid=3064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:08.485381 sshd[3064]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:35:08.490381 systemd[1]: Started session-12.scope. Oct 2 20:35:08.491892 systemd-logind[1309]: New session 12 of user core. Oct 2 20:35:08.501062 kernel: audit: type=1101 audit(1696278908.465:1125): pid=3064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:08.501150 kernel: audit: type=1103 audit(1696278908.483:1126): pid=3064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:08.501185 kernel: audit: type=1006 audit(1696278908.484:1127): pid=3064 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 20:35:08.484000 audit[3064]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdead1ee60 a2=3 a3=0 items=0 ppid=1 pid=3064 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:08.528488 kernel: audit: type=1300 audit(1696278908.484:1127): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdead1ee60 a2=3 a3=0 items=0 ppid=1 pid=3064 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:08.528582 kernel: audit: type=1327 audit(1696278908.484:1127): proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:08.484000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:08.535179 kernel: audit: type=1105 audit(1696278908.495:1128): pid=3064 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:08.495000 audit[3064]: USER_START pid=3064 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:08.497000 audit[3066]: CRED_ACQ pid=3066 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:08.554055 kernel: audit: type=1103 audit(1696278908.497:1129): pid=3066 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:08.967809 sshd[3064]: pam_unix(sshd:session): session closed for user core Oct 2 20:35:08.968000 audit[3064]: USER_END pid=3064 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:08.971556 systemd-logind[1309]: Session 12 logged out. Waiting for processes to exit. Oct 2 20:35:08.973175 systemd[1]: sshd@9-10.200.8.16:22-10.200.12.6:39010.service: Deactivated successfully. Oct 2 20:35:08.973942 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 20:35:08.975304 systemd-logind[1309]: Removed session 12. Oct 2 20:35:08.968000 audit[3064]: CRED_DISP pid=3064 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:09.003758 kernel: audit: type=1106 audit(1696278908.968:1130): pid=3064 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:09.003863 kernel: audit: type=1104 audit(1696278908.968:1131): pid=3064 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:08.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.16:22-10.200.12.6:39010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:11.807523 kubelet[2448]: E1002 20:35:11.807486 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:13.184000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:13.189892 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:35:13.189978 kernel: audit: type=1400 audit(1696278913.184:1133): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:13.184000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:13.222280 kernel: audit: type=1400 audit(1696278913.184:1134): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:13.222417 kernel: audit: type=1300 audit(1696278913.184:1134): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ff6160 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:35:13.184000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ff6160 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:35:13.184000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:13.246018 kernel: audit: type=1327 audit(1696278913.184:1134): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:13.184000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013f6780 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:35:13.284889 kernel: audit: type=1300 audit(1696278913.184:1133): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013f6780 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:35:13.285055 kernel: audit: type=1327 audit(1696278913.184:1133): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:13.184000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:13.229000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:13.318886 kernel: audit: type=1400 audit(1696278913.229:1135): avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:13.229000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c007f12f40 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:35:13.229000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:35:13.371161 kernel: audit: type=1300 audit(1696278913.229:1135): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c007f12f40 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:35:13.371323 kernel: audit: type=1327 audit(1696278913.229:1135): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:35:13.230000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:13.388018 kernel: audit: type=1400 audit(1696278913.230:1136): avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:13.230000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c008150900 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:35:13.230000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:35:13.237000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:13.237000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c008150a50 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:35:13.237000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:35:13.312000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:13.312000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c007f13040 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:35:13.312000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:35:13.312000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:13.312000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c008150c60 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:35:13.312000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:35:13.317000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:13.317000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c008150e70 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:35:13.317000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:35:16.808833 kubelet[2448]: E1002 20:35:16.808795 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:19.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.16:22-10.200.12.6:34070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:19.071862 systemd[1]: Started sshd@10-10.200.8.16:22-10.200.12.6:34070.service. Oct 2 20:35:19.076978 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:35:19.077063 kernel: audit: type=1130 audit(1696278919.071:1141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.16:22-10.200.12.6:34070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:19.628713 kubelet[2448]: E1002 20:35:19.628667 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:35:19.696000 audit[3079]: USER_ACCT pid=3079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:19.718066 kernel: audit: type=1101 audit(1696278919.696:1142): pid=3079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:19.718133 sshd[3079]: Accepted publickey for core from 10.200.12.6 port 34070 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:35:19.718569 sshd[3079]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:35:19.717000 audit[3079]: CRED_ACQ pid=3079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:19.723862 systemd[1]: Started session-13.scope. Oct 2 20:35:19.725273 systemd-logind[1309]: New session 13 of user core. Oct 2 20:35:19.735015 kernel: audit: type=1103 audit(1696278919.717:1143): pid=3079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:19.735083 kernel: audit: type=1006 audit(1696278919.717:1144): pid=3079 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 20:35:19.745031 kernel: audit: type=1300 audit(1696278919.717:1144): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff67f6b360 a2=3 a3=0 items=0 ppid=1 pid=3079 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:19.717000 audit[3079]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff67f6b360 a2=3 a3=0 items=0 ppid=1 pid=3079 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:19.717000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:19.768590 kernel: audit: type=1327 audit(1696278919.717:1144): proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:19.768689 kernel: audit: type=1105 audit(1696278919.728:1145): pid=3079 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:19.728000 audit[3079]: USER_START pid=3079 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:19.728000 audit[3081]: CRED_ACQ pid=3081 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:19.813410 kernel: audit: type=1103 audit(1696278919.728:1146): pid=3081 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:20.420217 sshd[3079]: pam_unix(sshd:session): session closed for user core Oct 2 20:35:20.420000 audit[3079]: USER_END pid=3079 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:20.423903 systemd-logind[1309]: Session 13 logged out. Waiting for processes to exit. Oct 2 20:35:20.425709 systemd[1]: sshd@10-10.200.8.16:22-10.200.12.6:34070.service: Deactivated successfully. Oct 2 20:35:20.426560 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 20:35:20.428112 systemd-logind[1309]: Removed session 13. Oct 2 20:35:20.420000 audit[3079]: CRED_DISP pid=3079 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:20.457782 kernel: audit: type=1106 audit(1696278920.420:1147): pid=3079 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:20.457888 kernel: audit: type=1104 audit(1696278920.420:1148): pid=3079 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:20.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.16:22-10.200.12.6:34070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:21.810398 kubelet[2448]: E1002 20:35:21.810360 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:26.811455 kubelet[2448]: E1002 20:35:26.811413 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:28.086000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:28.091351 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:35:28.091455 kernel: audit: type=1400 audit(1696278928.086:1150): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:28.086000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ff7ca0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:35:28.136683 kernel: audit: type=1300 audit(1696278928.086:1150): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ff7ca0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:35:28.086000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:28.107000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:28.171018 kernel: audit: type=1327 audit(1696278928.086:1150): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:28.171143 kernel: audit: type=1400 audit(1696278928.107:1151): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:28.107000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e7dc00 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:35:28.192809 kernel: audit: type=1300 audit(1696278928.107:1151): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e7dc00 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:35:28.192950 kernel: audit: type=1327 audit(1696278928.107:1151): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:28.107000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:28.107000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:28.211023 kernel: audit: type=1400 audit(1696278928.107:1152): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:28.107000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e7dc40 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:35:28.247483 kernel: audit: type=1300 audit(1696278928.107:1152): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e7dc40 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:35:28.247618 kernel: audit: type=1327 audit(1696278928.107:1152): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:28.107000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:28.108000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:28.281151 kernel: audit: type=1400 audit(1696278928.108:1153): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:28.108000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ff7ec0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:35:28.108000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:30.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.16:22-10.200.12.6:40566 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:30.582486 systemd[1]: Started sshd@11-10.200.8.16:22-10.200.12.6:40566.service. Oct 2 20:35:31.221000 audit[3095]: USER_ACCT pid=3095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:31.223231 sshd[3095]: Accepted publickey for core from 10.200.12.6 port 40566 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:35:31.223000 audit[3095]: CRED_ACQ pid=3095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:31.223000 audit[3095]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6c330f30 a2=3 a3=0 items=0 ppid=1 pid=3095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:31.223000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:31.225068 sshd[3095]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:35:31.230440 systemd-logind[1309]: New session 14 of user core. Oct 2 20:35:31.230818 systemd[1]: Started session-14.scope. Oct 2 20:35:31.234000 audit[3095]: USER_START pid=3095 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:31.236000 audit[3097]: CRED_ACQ pid=3097 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:31.631639 env[1325]: time="2023-10-02T20:35:31.631583122Z" level=info msg="CreateContainer within sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 20:35:31.661034 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1782149890.mount: Deactivated successfully. Oct 2 20:35:31.667225 env[1325]: time="2023-10-02T20:35:31.667172913Z" level=info msg="CreateContainer within sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b\"" Oct 2 20:35:31.667871 env[1325]: time="2023-10-02T20:35:31.667825424Z" level=info msg="StartContainer for \"0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b\"" Oct 2 20:35:31.686828 systemd[1]: Started cri-containerd-0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b.scope. Oct 2 20:35:31.704740 systemd[1]: cri-containerd-0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b.scope: Deactivated successfully. Oct 2 20:35:31.746254 env[1325]: time="2023-10-02T20:35:31.746196625Z" level=info msg="shim disconnected" id=0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b Oct 2 20:35:31.746254 env[1325]: time="2023-10-02T20:35:31.746255926Z" level=warning msg="cleaning up after shim disconnected" id=0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b namespace=k8s.io Oct 2 20:35:31.746254 env[1325]: time="2023-10-02T20:35:31.746267026Z" level=info msg="cleaning up dead shim" Oct 2 20:35:31.754542 env[1325]: time="2023-10-02T20:35:31.754491963Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:35:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3131 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:35:31Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:35:31.754799 env[1325]: time="2023-10-02T20:35:31.754743167Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 20:35:31.754959 env[1325]: time="2023-10-02T20:35:31.754915170Z" level=error msg="Failed to pipe stdout of container \"0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b\"" error="reading from a closed fifo" Oct 2 20:35:31.756479 env[1325]: time="2023-10-02T20:35:31.756433495Z" level=error msg="Failed to pipe stderr of container \"0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b\"" error="reading from a closed fifo" Oct 2 20:35:31.760951 sshd[3095]: pam_unix(sshd:session): session closed for user core Oct 2 20:35:31.762194 env[1325]: time="2023-10-02T20:35:31.762112590Z" level=error msg="StartContainer for \"0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:35:31.761000 audit[3095]: USER_END pid=3095 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:31.763126 kubelet[2448]: E1002 20:35:31.762566 2448 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b" Oct 2 20:35:31.763126 kubelet[2448]: E1002 20:35:31.762707 2448 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:35:31.763126 kubelet[2448]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:35:31.763126 kubelet[2448]: rm /hostbin/cilium-mount Oct 2 20:35:31.763126 kubelet[2448]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9mjss,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:35:31.763126 kubelet[2448]: E1002 20:35:31.762757 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:35:31.764559 systemd[1]: sshd@11-10.200.8.16:22-10.200.12.6:40566.service: Deactivated successfully. Oct 2 20:35:31.762000 audit[3095]: CRED_DISP pid=3095 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:31.763000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.16:22-10.200.12.6:40566 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:31.765473 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 20:35:31.766199 systemd-logind[1309]: Session 14 logged out. Waiting for processes to exit. Oct 2 20:35:31.767025 systemd-logind[1309]: Removed session 14. Oct 2 20:35:31.812198 kubelet[2448]: E1002 20:35:31.812153 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:32.088931 kubelet[2448]: I1002 20:35:32.088894 2448 scope.go:117] "RemoveContainer" containerID="29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a" Oct 2 20:35:32.089334 kubelet[2448]: I1002 20:35:32.089309 2448 scope.go:117] "RemoveContainer" containerID="29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a" Oct 2 20:35:32.098358 env[1325]: time="2023-10-02T20:35:32.098215660Z" level=info msg="RemoveContainer for \"29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a\"" Oct 2 20:35:32.104510 env[1325]: time="2023-10-02T20:35:32.104466563Z" level=info msg="RemoveContainer for \"29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a\"" Oct 2 20:35:32.104793 env[1325]: time="2023-10-02T20:35:32.104749268Z" level=error msg="RemoveContainer for \"29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a\" failed" error="failed to set removing state for container \"29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a\": container is already in removing state" Oct 2 20:35:32.105108 kubelet[2448]: E1002 20:35:32.105072 2448 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a\": container is already in removing state" containerID="29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a" Oct 2 20:35:32.105233 kubelet[2448]: I1002 20:35:32.105153 2448 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a"} err="rpc error: code = Unknown desc = failed to set removing state for container \"29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a\": container is already in removing state" Oct 2 20:35:32.119684 env[1325]: time="2023-10-02T20:35:32.119632113Z" level=info msg="RemoveContainer for \"29f7636ef013f25f9e7211547aebc87317c7b9bb1bc945f861b8a2782fe20d0a\" returns successfully" Oct 2 20:35:32.120242 kubelet[2448]: E1002 20:35:32.120209 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:35:32.656777 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b-rootfs.mount: Deactivated successfully. Oct 2 20:35:34.851374 kubelet[2448]: W1002 20:35:34.851326 2448 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod788f4114_8c97_4ea0_ba33_c33540486cf1.slice/cri-containerd-0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b.scope WatchSource:0}: task 0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b not found: not found Oct 2 20:35:36.813111 kubelet[2448]: E1002 20:35:36.813062 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:41.814463 kubelet[2448]: E1002 20:35:41.814428 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:41.880719 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:35:41.880843 kernel: audit: type=1130 audit(1696278941.869:1163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.16:22-10.200.12.6:32842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:41.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.16:22-10.200.12.6:32842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:41.870537 systemd[1]: Started sshd@12-10.200.8.16:22-10.200.12.6:32842.service. Oct 2 20:35:42.506000 audit[3147]: USER_ACCT pid=3147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:42.507830 sshd[3147]: Accepted publickey for core from 10.200.12.6 port 32842 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:35:42.526025 kernel: audit: type=1101 audit(1696278942.506:1164): pid=3147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:42.525000 audit[3147]: CRED_ACQ pid=3147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:42.526671 sshd[3147]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:35:42.537442 systemd[1]: Started session-15.scope. Oct 2 20:35:42.538828 systemd-logind[1309]: New session 15 of user core. Oct 2 20:35:42.555104 kernel: audit: type=1103 audit(1696278942.525:1165): pid=3147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:42.555234 kernel: audit: type=1006 audit(1696278942.525:1166): pid=3147 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 20:35:42.555263 kernel: audit: type=1300 audit(1696278942.525:1166): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde61e7f20 a2=3 a3=0 items=0 ppid=1 pid=3147 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:42.525000 audit[3147]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde61e7f20 a2=3 a3=0 items=0 ppid=1 pid=3147 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:42.525000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:42.573021 kernel: audit: type=1327 audit(1696278942.525:1166): proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:42.579316 kernel: audit: type=1105 audit(1696278942.544:1167): pid=3147 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:42.544000 audit[3147]: USER_START pid=3147 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:42.544000 audit[3152]: CRED_ACQ pid=3152 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:42.598022 kernel: audit: type=1103 audit(1696278942.544:1168): pid=3152 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:43.196564 sshd[3147]: pam_unix(sshd:session): session closed for user core Oct 2 20:35:43.197000 audit[3147]: USER_END pid=3147 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:43.200511 systemd[1]: sshd@12-10.200.8.16:22-10.200.12.6:32842.service: Deactivated successfully. Oct 2 20:35:43.201348 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 20:35:43.203113 systemd-logind[1309]: Session 15 logged out. Waiting for processes to exit. Oct 2 20:35:43.204127 systemd-logind[1309]: Removed session 15. Oct 2 20:35:43.197000 audit[3147]: CRED_DISP pid=3147 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:43.218029 kernel: audit: type=1106 audit(1696278943.197:1169): pid=3147 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:43.218080 kernel: audit: type=1104 audit(1696278943.197:1170): pid=3147 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:43.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.16:22-10.200.12.6:32842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:45.628644 kubelet[2448]: E1002 20:35:45.628604 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:35:46.816337 kubelet[2448]: E1002 20:35:46.816286 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:51.817582 kubelet[2448]: E1002 20:35:51.817543 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:53.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.16:22-10.200.12.6:33680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.297265 systemd[1]: Started sshd@13-10.200.8.16:22-10.200.12.6:33680.service. Oct 2 20:35:53.303928 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:35:53.304032 kernel: audit: type=1130 audit(1696278953.296:1172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.16:22-10.200.12.6:33680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:53.922000 audit[3163]: USER_ACCT pid=3163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:53.942720 sshd[3163]: Accepted publickey for core from 10.200.12.6 port 33680 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:35:53.943073 kernel: audit: type=1101 audit(1696278953.922:1173): pid=3163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:53.943251 sshd[3163]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:35:53.941000 audit[3163]: CRED_ACQ pid=3163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:53.948613 systemd[1]: Started session-16.scope. Oct 2 20:35:53.949766 systemd-logind[1309]: New session 16 of user core. Oct 2 20:35:53.970651 kernel: audit: type=1103 audit(1696278953.941:1174): pid=3163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:53.970780 kernel: audit: type=1006 audit(1696278953.941:1175): pid=3163 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 20:35:53.970826 kernel: audit: type=1300 audit(1696278953.941:1175): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda07f30e0 a2=3 a3=0 items=0 ppid=1 pid=3163 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:53.941000 audit[3163]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda07f30e0 a2=3 a3=0 items=0 ppid=1 pid=3163 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:53.941000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:53.989043 kernel: audit: type=1327 audit(1696278953.941:1175): proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:53.953000 audit[3163]: USER_START pid=3163 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:54.015308 kernel: audit: type=1105 audit(1696278953.953:1176): pid=3163 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:54.015454 kernel: audit: type=1103 audit(1696278953.956:1177): pid=3165 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:53.956000 audit[3165]: CRED_ACQ pid=3165 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:54.412053 sshd[3163]: pam_unix(sshd:session): session closed for user core Oct 2 20:35:54.412000 audit[3163]: USER_END pid=3163 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:54.415082 systemd[1]: sshd@13-10.200.8.16:22-10.200.12.6:33680.service: Deactivated successfully. Oct 2 20:35:54.415840 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 20:35:54.417289 systemd-logind[1309]: Session 16 logged out. Waiting for processes to exit. Oct 2 20:35:54.418219 systemd-logind[1309]: Removed session 16. Oct 2 20:35:54.412000 audit[3163]: CRED_DISP pid=3163 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:54.448753 kernel: audit: type=1106 audit(1696278954.412:1178): pid=3163 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:54.448894 kernel: audit: type=1104 audit(1696278954.412:1179): pid=3163 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:54.412000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.16:22-10.200.12.6:33680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:56.818398 kubelet[2448]: E1002 20:35:56.818353 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:00.629611 kubelet[2448]: E1002 20:36:00.629568 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:36:01.819726 kubelet[2448]: E1002 20:36:01.819673 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:04.542048 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:36:04.542248 kernel: audit: type=1130 audit(1696278964.518:1181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.16:22-10.200.12.6:48980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:04.518000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.16:22-10.200.12.6:48980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:04.519557 systemd[1]: Started sshd@14-10.200.8.16:22-10.200.12.6:48980.service. Oct 2 20:36:05.154000 audit[3181]: USER_ACCT pid=3181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:05.175544 sshd[3181]: Accepted publickey for core from 10.200.12.6 port 48980 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:36:05.174000 audit[3181]: CRED_ACQ pid=3181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:05.175961 sshd[3181]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:36:05.185770 systemd[1]: Started session-17.scope. Oct 2 20:36:05.187032 systemd-logind[1309]: New session 17 of user core. Oct 2 20:36:05.195364 kernel: audit: type=1101 audit(1696278965.154:1182): pid=3181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:05.195479 kernel: audit: type=1103 audit(1696278965.174:1183): pid=3181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:05.195516 kernel: audit: type=1006 audit(1696278965.174:1184): pid=3181 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 20:36:05.174000 audit[3181]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd90ac83a0 a2=3 a3=0 items=0 ppid=1 pid=3181 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:05.230953 kernel: audit: type=1300 audit(1696278965.174:1184): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd90ac83a0 a2=3 a3=0 items=0 ppid=1 pid=3181 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:05.174000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:05.192000 audit[3181]: USER_START pid=3181 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:05.238052 kernel: audit: type=1327 audit(1696278965.174:1184): proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:05.238123 kernel: audit: type=1105 audit(1696278965.192:1185): pid=3181 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:05.195000 audit[3183]: CRED_ACQ pid=3183 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:05.272303 kernel: audit: type=1103 audit(1696278965.195:1186): pid=3183 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:05.661404 sshd[3181]: pam_unix(sshd:session): session closed for user core Oct 2 20:36:05.661000 audit[3181]: USER_END pid=3181 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:05.664482 systemd[1]: sshd@14-10.200.8.16:22-10.200.12.6:48980.service: Deactivated successfully. Oct 2 20:36:05.665384 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 20:36:05.670760 systemd-logind[1309]: Session 17 logged out. Waiting for processes to exit. Oct 2 20:36:05.671735 systemd-logind[1309]: Removed session 17. Oct 2 20:36:05.661000 audit[3181]: CRED_DISP pid=3181 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:05.698112 kernel: audit: type=1106 audit(1696278965.661:1187): pid=3181 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:05.698216 kernel: audit: type=1104 audit(1696278965.661:1188): pid=3181 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:05.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.16:22-10.200.12.6:48980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:06.820386 kubelet[2448]: E1002 20:36:06.820347 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:11.822621 kubelet[2448]: E1002 20:36:11.822583 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:12.629144 kubelet[2448]: E1002 20:36:12.629098 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:36:13.185000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:13.190978 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:36:13.191124 kernel: audit: type=1400 audit(1696278973.185:1191): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:13.185000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:13.224346 kernel: audit: type=1400 audit(1696278973.185:1190): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:13.224475 kernel: audit: type=1300 audit(1696278973.185:1191): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001faa8d0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:36:13.185000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001faa8d0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:36:13.185000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:36:13.185000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00149d080 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:36:13.284960 kernel: audit: type=1327 audit(1696278973.185:1191): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:36:13.285106 kernel: audit: type=1300 audit(1696278973.185:1190): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00149d080 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:36:13.285137 kernel: audit: type=1327 audit(1696278973.185:1190): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:36:13.185000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:36:13.230000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:13.317587 kernel: audit: type=1400 audit(1696278973.230:1192): avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:13.230000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00c1fdcb0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:36:13.230000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:36:13.355613 kernel: audit: type=1300 audit(1696278973.230:1192): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00c1fdcb0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:36:13.355734 kernel: audit: type=1327 audit(1696278973.230:1192): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:36:13.355779 kernel: audit: type=1400 audit(1696278973.230:1193): avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:13.230000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:13.230000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00cb3c2c0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:36:13.230000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:36:13.238000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:13.238000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00c15da10 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:36:13.238000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:36:13.317000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:13.317000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00c15da40 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:36:13.317000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:36:13.317000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:13.317000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00c98e280 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:36:13.317000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:36:13.317000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:13.317000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00c15dad0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:36:13.317000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:36:15.762052 systemd[1]: Started sshd@15-10.200.8.16:22-10.200.12.6:59754.service. Oct 2 20:36:15.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.16:22-10.200.12.6:59754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:16.387000 audit[3194]: USER_ACCT pid=3194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:16.388877 sshd[3194]: Accepted publickey for core from 10.200.12.6 port 59754 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:36:16.389000 audit[3194]: CRED_ACQ pid=3194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:16.389000 audit[3194]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc677b7d70 a2=3 a3=0 items=0 ppid=1 pid=3194 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:16.389000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:16.390638 sshd[3194]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:36:16.395863 systemd[1]: Started session-18.scope. Oct 2 20:36:16.396364 systemd-logind[1309]: New session 18 of user core. Oct 2 20:36:16.400000 audit[3194]: USER_START pid=3194 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:16.401000 audit[3196]: CRED_ACQ pid=3196 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:16.823887 kubelet[2448]: E1002 20:36:16.823852 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:16.885662 sshd[3194]: pam_unix(sshd:session): session closed for user core Oct 2 20:36:16.886000 audit[3194]: USER_END pid=3194 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:16.886000 audit[3194]: CRED_DISP pid=3194 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:16.889112 systemd[1]: sshd@15-10.200.8.16:22-10.200.12.6:59754.service: Deactivated successfully. Oct 2 20:36:16.890306 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 20:36:16.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.16:22-10.200.12.6:59754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:16.891927 systemd-logind[1309]: Session 18 logged out. Waiting for processes to exit. Oct 2 20:36:16.892918 systemd-logind[1309]: Removed session 18. Oct 2 20:36:21.824699 kubelet[2448]: E1002 20:36:21.824655 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:26.629355 kubelet[2448]: E1002 20:36:26.629308 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:36:26.826157 kubelet[2448]: E1002 20:36:26.826117 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:26.990796 systemd[1]: Started sshd@16-10.200.8.16:22-10.200.12.6:55072.service. Oct 2 20:36:27.013318 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:36:27.013463 kernel: audit: type=1130 audit(1696278986.991:1207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.16:22-10.200.12.6:55072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:26.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.16:22-10.200.12.6:55072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:27.640000 audit[3209]: USER_ACCT pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:27.641000 audit[3209]: CRED_ACQ pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:27.643227 sshd[3209]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:36:27.661136 sshd[3209]: Accepted publickey for core from 10.200.12.6 port 55072 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:36:27.665894 systemd[1]: Started session-19.scope. Oct 2 20:36:27.667153 systemd-logind[1309]: New session 19 of user core. Oct 2 20:36:27.677402 kernel: audit: type=1101 audit(1696278987.640:1208): pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:27.677519 kernel: audit: type=1103 audit(1696278987.641:1209): pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:27.677551 kernel: audit: type=1006 audit(1696278987.641:1210): pid=3209 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 20:36:27.641000 audit[3209]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffdeaf26c0 a2=3 a3=0 items=0 ppid=1 pid=3209 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:27.688068 kernel: audit: type=1300 audit(1696278987.641:1210): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffdeaf26c0 a2=3 a3=0 items=0 ppid=1 pid=3209 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:27.641000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:27.705017 kernel: audit: type=1327 audit(1696278987.641:1210): proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:27.672000 audit[3209]: USER_START pid=3209 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:27.727080 kernel: audit: type=1105 audit(1696278987.672:1211): pid=3209 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:27.674000 audit[3211]: CRED_ACQ pid=3211 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:27.760506 kernel: audit: type=1103 audit(1696278987.674:1212): pid=3211 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:28.087000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:28.087000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00149d920 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:36:28.127531 kernel: audit: type=1400 audit(1696278988.087:1213): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:28.127698 kernel: audit: type=1300 audit(1696278988.087:1213): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00149d920 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:36:28.087000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:36:28.107000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:28.107000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00282bc40 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:36:28.107000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:36:28.107000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:28.107000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00282bc60 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:36:28.107000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:36:28.109000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:28.109000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00282bd80 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:36:28.109000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:36:28.134196 sshd[3209]: pam_unix(sshd:session): session closed for user core Oct 2 20:36:28.134000 audit[3209]: USER_END pid=3209 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:28.134000 audit[3209]: CRED_DISP pid=3209 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:28.137312 systemd[1]: sshd@16-10.200.8.16:22-10.200.12.6:55072.service: Deactivated successfully. Oct 2 20:36:28.136000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.16:22-10.200.12.6:55072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:28.138274 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 20:36:28.139031 systemd-logind[1309]: Session 19 logged out. Waiting for processes to exit. Oct 2 20:36:28.139806 systemd-logind[1309]: Removed session 19. Oct 2 20:36:28.259352 systemd[1]: Started sshd@17-10.200.8.16:22-10.200.12.6:39248.service. Oct 2 20:36:28.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.16:22-10.200.12.6:39248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:28.891000 audit[3222]: USER_ACCT pid=3222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:28.892844 sshd[3222]: Accepted publickey for core from 10.200.12.6 port 39248 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:36:28.892000 audit[3222]: CRED_ACQ pid=3222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:28.893000 audit[3222]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcdc8ca140 a2=3 a3=0 items=0 ppid=1 pid=3222 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:28.893000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:28.894545 sshd[3222]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:36:28.900282 systemd[1]: Started session-20.scope. Oct 2 20:36:28.900854 systemd-logind[1309]: New session 20 of user core. Oct 2 20:36:28.904000 audit[3222]: USER_START pid=3222 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:28.906000 audit[3224]: CRED_ACQ pid=3224 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:30.045932 sshd[3222]: pam_unix(sshd:session): session closed for user core Oct 2 20:36:30.046000 audit[3222]: USER_END pid=3222 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:30.046000 audit[3222]: CRED_DISP pid=3222 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:30.049178 systemd[1]: sshd@17-10.200.8.16:22-10.200.12.6:39248.service: Deactivated successfully. Oct 2 20:36:30.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.16:22-10.200.12.6:39248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:30.050093 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 20:36:30.050738 systemd-logind[1309]: Session 20 logged out. Waiting for processes to exit. Oct 2 20:36:30.051541 systemd-logind[1309]: Removed session 20. Oct 2 20:36:30.200453 systemd[1]: Started sshd@18-10.200.8.16:22-10.200.12.6:39264.service. Oct 2 20:36:30.199000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.16:22-10.200.12.6:39264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:31.025000 audit[3234]: USER_ACCT pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:31.026896 sshd[3234]: Accepted publickey for core from 10.200.12.6 port 39264 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:36:31.026000 audit[3234]: CRED_ACQ pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:31.026000 audit[3234]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc22b12b00 a2=3 a3=0 items=0 ppid=1 pid=3234 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:31.026000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:31.028394 sshd[3234]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:36:31.033064 systemd-logind[1309]: New session 21 of user core. Oct 2 20:36:31.033156 systemd[1]: Started session-21.scope. Oct 2 20:36:31.037000 audit[3234]: USER_START pid=3234 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:31.038000 audit[3236]: CRED_ACQ pid=3236 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:31.524934 sshd[3234]: pam_unix(sshd:session): session closed for user core Oct 2 20:36:31.525000 audit[3234]: USER_END pid=3234 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:31.525000 audit[3234]: CRED_DISP pid=3234 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:31.528434 systemd[1]: sshd@18-10.200.8.16:22-10.200.12.6:39264.service: Deactivated successfully. Oct 2 20:36:31.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.16:22-10.200.12.6:39264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:31.529570 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 20:36:31.530429 systemd-logind[1309]: Session 21 logged out. Waiting for processes to exit. Oct 2 20:36:31.531491 systemd-logind[1309]: Removed session 21. Oct 2 20:36:31.827601 kubelet[2448]: E1002 20:36:31.827478 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:36.828724 kubelet[2448]: E1002 20:36:36.828677 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:39.628309 kubelet[2448]: E1002 20:36:39.628262 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:36:41.649210 kernel: kauditd_printk_skb: 35 callbacks suppressed Oct 2 20:36:41.649402 kernel: audit: type=1130 audit(1696279001.628:1238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.16:22-10.200.12.6:47696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:41.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.16:22-10.200.12.6:47696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:41.629289 systemd[1]: Started sshd@19-10.200.8.16:22-10.200.12.6:47696.service. Oct 2 20:36:41.829975 kubelet[2448]: E1002 20:36:41.829928 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:42.253000 audit[3246]: USER_ACCT pid=3246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:42.272740 sshd[3246]: Accepted publickey for core from 10.200.12.6 port 47696 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:36:42.273224 kernel: audit: type=1101 audit(1696279002.253:1239): pid=3246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:42.273112 sshd[3246]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:36:42.271000 audit[3246]: CRED_ACQ pid=3246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:42.277299 systemd-logind[1309]: New session 22 of user core. Oct 2 20:36:42.280141 systemd[1]: Started session-22.scope. Oct 2 20:36:42.291039 kernel: audit: type=1103 audit(1696279002.271:1240): pid=3246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:42.291137 kernel: audit: type=1006 audit(1696279002.271:1241): pid=3246 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 20:36:42.271000 audit[3246]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5f702530 a2=3 a3=0 items=0 ppid=1 pid=3246 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:42.302015 kernel: audit: type=1300 audit(1696279002.271:1241): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5f702530 a2=3 a3=0 items=0 ppid=1 pid=3246 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:42.320325 kernel: audit: type=1327 audit(1696279002.271:1241): proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:42.271000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:42.284000 audit[3246]: USER_START pid=3246 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:42.326014 kernel: audit: type=1105 audit(1696279002.284:1242): pid=3246 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:42.285000 audit[3248]: CRED_ACQ pid=3248 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:42.360856 kernel: audit: type=1103 audit(1696279002.285:1243): pid=3248 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:42.812329 sshd[3246]: pam_unix(sshd:session): session closed for user core Oct 2 20:36:42.812000 audit[3246]: USER_END pid=3246 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:42.817648 systemd-logind[1309]: Session 22 logged out. Waiting for processes to exit. Oct 2 20:36:42.819096 systemd[1]: sshd@19-10.200.8.16:22-10.200.12.6:47696.service: Deactivated successfully. Oct 2 20:36:42.819859 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 20:36:42.821429 systemd-logind[1309]: Removed session 22. Oct 2 20:36:42.813000 audit[3246]: CRED_DISP pid=3246 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:42.845582 kernel: audit: type=1106 audit(1696279002.812:1244): pid=3246 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:42.845733 kernel: audit: type=1104 audit(1696279002.813:1245): pid=3246 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:42.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.16:22-10.200.12.6:47696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:46.831254 kubelet[2448]: E1002 20:36:46.831214 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:51.832949 kubelet[2448]: E1002 20:36:51.832900 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:53.060260 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:36:53.060380 kernel: audit: type=1130 audit(1696279013.046:1247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.16:22-10.200.12.6:47198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:53.046000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.16:22-10.200.12.6:47198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:53.047390 systemd[1]: Started sshd@20-10.200.8.16:22-10.200.12.6:47198.service. Oct 2 20:36:53.628703 kubelet[2448]: E1002 20:36:53.628652 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:36:53.789000 audit[3258]: USER_ACCT pid=3258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:53.790681 sshd[3258]: Accepted publickey for core from 10.200.12.6 port 47198 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:36:53.808000 audit[3258]: CRED_ACQ pid=3258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:53.810058 sshd[3258]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:36:53.815115 systemd-logind[1309]: New session 23 of user core. Oct 2 20:36:53.816700 systemd[1]: Started session-23.scope. Oct 2 20:36:53.827233 kernel: audit: type=1101 audit(1696279013.789:1248): pid=3258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:53.827351 kernel: audit: type=1103 audit(1696279013.808:1249): pid=3258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:53.837901 kernel: audit: type=1006 audit(1696279013.808:1250): pid=3258 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 20:36:53.808000 audit[3258]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9d195440 a2=3 a3=0 items=0 ppid=1 pid=3258 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:53.808000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:53.860965 kernel: audit: type=1300 audit(1696279013.808:1250): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9d195440 a2=3 a3=0 items=0 ppid=1 pid=3258 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:53.861103 kernel: audit: type=1327 audit(1696279013.808:1250): proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:53.861131 kernel: audit: type=1105 audit(1696279013.821:1251): pid=3258 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:53.821000 audit[3258]: USER_START pid=3258 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:53.880313 kernel: audit: type=1103 audit(1696279013.823:1252): pid=3260 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:53.823000 audit[3260]: CRED_ACQ pid=3260 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:54.291699 sshd[3258]: pam_unix(sshd:session): session closed for user core Oct 2 20:36:54.292000 audit[3258]: USER_END pid=3258 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:54.295518 systemd-logind[1309]: Session 23 logged out. Waiting for processes to exit. Oct 2 20:36:54.297242 systemd[1]: sshd@20-10.200.8.16:22-10.200.12.6:47198.service: Deactivated successfully. Oct 2 20:36:54.298099 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 20:36:54.299749 systemd-logind[1309]: Removed session 23. Oct 2 20:36:54.292000 audit[3258]: CRED_DISP pid=3258 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:54.329648 kernel: audit: type=1106 audit(1696279014.292:1253): pid=3258 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:54.329784 kernel: audit: type=1104 audit(1696279014.292:1254): pid=3258 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:54.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.16:22-10.200.12.6:47198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:56.834256 kubelet[2448]: E1002 20:36:56.834217 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:01.835758 kubelet[2448]: E1002 20:37:01.835718 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:04.403162 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:37:04.403335 kernel: audit: type=1130 audit(1696279024.397:1256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.16:22-10.200.12.6:50624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:04.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.16:22-10.200.12.6:50624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:04.397836 systemd[1]: Started sshd@21-10.200.8.16:22-10.200.12.6:50624.service. Oct 2 20:37:04.629411 kubelet[2448]: E1002 20:37:04.629127 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:37:05.044519 kernel: audit: type=1101 audit(1696279025.024:1257): pid=3272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:05.024000 audit[3272]: USER_ACCT pid=3272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:05.044772 sshd[3272]: Accepted publickey for core from 10.200.12.6 port 50624 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:37:05.044688 sshd[3272]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:05.043000 audit[3272]: CRED_ACQ pid=3272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:05.050067 systemd[1]: Started session-24.scope. Oct 2 20:37:05.051054 systemd-logind[1309]: New session 24 of user core. Oct 2 20:37:05.062044 kernel: audit: type=1103 audit(1696279025.043:1258): pid=3272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:05.062134 kernel: audit: type=1006 audit(1696279025.043:1259): pid=3272 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 20:37:05.043000 audit[3272]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbc298ff0 a2=3 a3=0 items=0 ppid=1 pid=3272 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:05.089310 kernel: audit: type=1300 audit(1696279025.043:1259): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbc298ff0 a2=3 a3=0 items=0 ppid=1 pid=3272 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:05.089426 kernel: audit: type=1327 audit(1696279025.043:1259): proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:05.043000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:05.050000 audit[3272]: USER_START pid=3272 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:05.114648 kernel: audit: type=1105 audit(1696279025.050:1260): pid=3272 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:05.115620 kernel: audit: type=1103 audit(1696279025.055:1261): pid=3274 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:05.055000 audit[3274]: CRED_ACQ pid=3274 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:05.522495 sshd[3272]: pam_unix(sshd:session): session closed for user core Oct 2 20:37:05.522000 audit[3272]: USER_END pid=3272 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:05.525572 systemd-logind[1309]: Session 24 logged out. Waiting for processes to exit. Oct 2 20:37:05.526990 systemd[1]: sshd@21-10.200.8.16:22-10.200.12.6:50624.service: Deactivated successfully. Oct 2 20:37:05.527726 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 20:37:05.529468 systemd-logind[1309]: Removed session 24. Oct 2 20:37:05.523000 audit[3272]: CRED_DISP pid=3272 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:05.559031 kernel: audit: type=1106 audit(1696279025.522:1262): pid=3272 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:05.559175 kernel: audit: type=1104 audit(1696279025.523:1263): pid=3272 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:05.526000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.16:22-10.200.12.6:50624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:06.836979 kubelet[2448]: E1002 20:37:06.836943 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:11.838210 kubelet[2448]: E1002 20:37:11.838177 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:13.187000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:13.192603 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:37:13.192745 kernel: audit: type=1400 audit(1696279033.187:1266): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:13.187000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:13.225275 kernel: audit: type=1400 audit(1696279033.187:1265): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:13.225386 kernel: audit: type=1300 audit(1696279033.187:1266): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d98a80 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:37:13.187000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d98a80 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:37:13.187000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:37:13.248033 kernel: audit: type=1327 audit(1696279033.187:1266): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:37:13.187000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f873c0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:37:13.288240 kernel: audit: type=1300 audit(1696279033.187:1265): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f873c0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:37:13.288383 kernel: audit: type=1327 audit(1696279033.187:1265): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:37:13.187000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:37:13.230000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:13.306019 kernel: audit: type=1400 audit(1696279033.230:1267): avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:13.230000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c009c27d00 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:37:13.341477 kernel: audit: type=1300 audit(1696279033.230:1267): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c009c27d00 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:37:13.341633 kernel: audit: type=1327 audit(1696279033.230:1267): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:37:13.230000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:37:13.231000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:13.381034 kernel: audit: type=1400 audit(1696279033.231:1268): avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:13.231000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c007cb70e0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:37:13.231000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:37:13.240000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:13.240000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0077b6870 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:37:13.240000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:37:13.320000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:13.320000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c007cb7320 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:37:13.320000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:37:13.321000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:13.321000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c009c27e00 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:37:13.321000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:37:13.321000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:13.321000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0077b68a0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:37:13.321000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:37:15.630423 systemd[1]: Started sshd@22-10.200.8.16:22-10.200.12.6:37224.service. Oct 2 20:37:15.630000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.16:22-10.200.12.6:37224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:16.258000 audit[3284]: USER_ACCT pid=3284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:16.259802 sshd[3284]: Accepted publickey for core from 10.200.12.6 port 37224 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:37:16.259000 audit[3284]: CRED_ACQ pid=3284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:16.259000 audit[3284]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfec46140 a2=3 a3=0 items=0 ppid=1 pid=3284 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:16.259000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:16.261267 sshd[3284]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:16.266893 systemd[1]: Started session-25.scope. Oct 2 20:37:16.267353 systemd-logind[1309]: New session 25 of user core. Oct 2 20:37:16.270000 audit[3284]: USER_START pid=3284 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:16.272000 audit[3286]: CRED_ACQ pid=3286 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:16.780404 sshd[3284]: pam_unix(sshd:session): session closed for user core Oct 2 20:37:16.780000 audit[3284]: USER_END pid=3284 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:16.780000 audit[3284]: CRED_DISP pid=3284 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:16.783935 systemd[1]: sshd@22-10.200.8.16:22-10.200.12.6:37224.service: Deactivated successfully. Oct 2 20:37:16.784898 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 20:37:16.783000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.16:22-10.200.12.6:37224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:16.785508 systemd-logind[1309]: Session 25 logged out. Waiting for processes to exit. Oct 2 20:37:16.786340 systemd-logind[1309]: Removed session 25. Oct 2 20:37:16.840602 kubelet[2448]: E1002 20:37:16.840569 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:18.629603 kubelet[2448]: E1002 20:37:18.629563 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:37:21.842450 kubelet[2448]: E1002 20:37:21.842409 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:26.843762 kubelet[2448]: E1002 20:37:26.843725 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:26.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.16:22-10.200.12.6:46386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:26.886237 systemd[1]: Started sshd@23-10.200.8.16:22-10.200.12.6:46386.service. Oct 2 20:37:26.891578 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:37:26.891661 kernel: audit: type=1130 audit(1696279046.885:1282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.16:22-10.200.12.6:46386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:27.514000 audit[3297]: USER_ACCT pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:27.535924 sshd[3297]: Accepted publickey for core from 10.200.12.6 port 46386 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:37:27.536316 kernel: audit: type=1101 audit(1696279047.514:1283): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:27.535724 sshd[3297]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:27.534000 audit[3297]: CRED_ACQ pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:27.541111 systemd[1]: Started session-26.scope. Oct 2 20:37:27.542590 systemd-logind[1309]: New session 26 of user core. Oct 2 20:37:27.555021 kernel: audit: type=1103 audit(1696279047.534:1284): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:27.534000 audit[3297]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec5b2ab10 a2=3 a3=0 items=0 ppid=1 pid=3297 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:27.567195 kernel: audit: type=1006 audit(1696279047.534:1285): pid=3297 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 20:37:27.567233 kernel: audit: type=1300 audit(1696279047.534:1285): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec5b2ab10 a2=3 a3=0 items=0 ppid=1 pid=3297 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:27.534000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:27.585040 kernel: audit: type=1327 audit(1696279047.534:1285): proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:27.554000 audit[3297]: USER_START pid=3297 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:27.625195 kernel: audit: type=1105 audit(1696279047.554:1286): pid=3297 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:27.625341 kernel: audit: type=1103 audit(1696279047.554:1287): pid=3299 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:27.554000 audit[3299]: CRED_ACQ pid=3299 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:28.023572 sshd[3297]: pam_unix(sshd:session): session closed for user core Oct 2 20:37:28.024000 audit[3297]: USER_END pid=3297 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:28.027322 systemd[1]: sshd@23-10.200.8.16:22-10.200.12.6:46386.service: Deactivated successfully. Oct 2 20:37:28.028196 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 20:37:28.030235 systemd-logind[1309]: Session 26 logged out. Waiting for processes to exit. Oct 2 20:37:28.031414 systemd-logind[1309]: Removed session 26. Oct 2 20:37:28.024000 audit[3297]: CRED_DISP pid=3297 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:28.061180 kernel: audit: type=1106 audit(1696279048.024:1288): pid=3297 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:28.061405 kernel: audit: type=1104 audit(1696279048.024:1289): pid=3297 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:28.024000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.16:22-10.200.12.6:46386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:28.088000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:28.088000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cca420 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:37:28.088000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:37:28.109000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:28.109000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:28.109000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cca440 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:37:28.109000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e7c020 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:37:28.109000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:37:28.109000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:37:28.109000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:28.109000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cca560 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:37:28.109000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:37:31.845455 kubelet[2448]: E1002 20:37:31.845422 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:33.628566 kubelet[2448]: E1002 20:37:33.628516 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:37:36.846737 kubelet[2448]: E1002 20:37:36.846705 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:38.129000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.16:22-10.200.12.6:35070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:38.130127 systemd[1]: Started sshd@24-10.200.8.16:22-10.200.12.6:35070.service. Oct 2 20:37:38.135578 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:37:38.135662 kernel: audit: type=1130 audit(1696279058.129:1295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.16:22-10.200.12.6:35070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:38.763000 audit[3312]: USER_ACCT pid=3312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:38.764628 sshd[3312]: Accepted publickey for core from 10.200.12.6 port 35070 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:37:38.782000 audit[3312]: CRED_ACQ pid=3312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:38.783968 sshd[3312]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:38.789159 systemd[1]: Started session-27.scope. Oct 2 20:37:38.790129 systemd-logind[1309]: New session 27 of user core. Oct 2 20:37:38.800598 kernel: audit: type=1101 audit(1696279058.763:1296): pid=3312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:38.800702 kernel: audit: type=1103 audit(1696279058.782:1297): pid=3312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:38.800735 kernel: audit: type=1006 audit(1696279058.782:1298): pid=3312 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 20:37:38.813028 kernel: audit: type=1300 audit(1696279058.782:1298): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1c546140 a2=3 a3=0 items=0 ppid=1 pid=3312 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:38.782000 audit[3312]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1c546140 a2=3 a3=0 items=0 ppid=1 pid=3312 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:38.782000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:38.829019 kernel: audit: type=1327 audit(1696279058.782:1298): proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:38.795000 audit[3312]: USER_START pid=3312 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:38.853982 kernel: audit: type=1105 audit(1696279058.795:1299): pid=3312 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:38.797000 audit[3314]: CRED_ACQ pid=3314 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:38.870061 kernel: audit: type=1103 audit(1696279058.797:1300): pid=3314 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:39.267443 sshd[3312]: pam_unix(sshd:session): session closed for user core Oct 2 20:37:39.268000 audit[3312]: USER_END pid=3312 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:39.271235 systemd[1]: sshd@24-10.200.8.16:22-10.200.12.6:35070.service: Deactivated successfully. Oct 2 20:37:39.272135 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 20:37:39.273712 systemd-logind[1309]: Session 27 logged out. Waiting for processes to exit. Oct 2 20:37:39.274815 systemd-logind[1309]: Removed session 27. Oct 2 20:37:39.268000 audit[3312]: CRED_DISP pid=3312 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:39.289022 kernel: audit: type=1106 audit(1696279059.268:1301): pid=3312 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:39.289068 kernel: audit: type=1104 audit(1696279059.268:1302): pid=3312 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:39.270000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.16:22-10.200.12.6:35070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:41.848757 kubelet[2448]: E1002 20:37:41.848717 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:45.628669 kubelet[2448]: E1002 20:37:45.628626 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:37:46.850098 kubelet[2448]: E1002 20:37:46.850061 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:49.374681 systemd[1]: Started sshd@25-10.200.8.16:22-10.200.12.6:52186.service. Oct 2 20:37:49.400075 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:37:49.400205 kernel: audit: type=1130 audit(1696279069.374:1304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.16:22-10.200.12.6:52186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:49.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.16:22-10.200.12.6:52186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:50.000000 audit[3325]: USER_ACCT pid=3325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:50.004230 sshd[3325]: Accepted publickey for core from 10.200.12.6 port 52186 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:37:50.021032 kernel: audit: type=1101 audit(1696279070.000:1305): pid=3325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:50.020000 audit[3325]: CRED_ACQ pid=3325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:50.021750 sshd[3325]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:50.026907 systemd[1]: Started session-28.scope. Oct 2 20:37:50.028490 systemd-logind[1309]: New session 28 of user core. Oct 2 20:37:50.039043 kernel: audit: type=1103 audit(1696279070.020:1306): pid=3325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:50.039143 kernel: audit: type=1006 audit(1696279070.020:1307): pid=3325 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 20:37:50.020000 audit[3325]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd47a572a0 a2=3 a3=0 items=0 ppid=1 pid=3325 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:50.066971 kernel: audit: type=1300 audit(1696279070.020:1307): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd47a572a0 a2=3 a3=0 items=0 ppid=1 pid=3325 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:50.067196 kernel: audit: type=1327 audit(1696279070.020:1307): proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:50.020000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:50.033000 audit[3325]: USER_START pid=3325 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:50.037000 audit[3327]: CRED_ACQ pid=3327 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:50.110097 kernel: audit: type=1105 audit(1696279070.033:1308): pid=3325 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:50.110231 kernel: audit: type=1103 audit(1696279070.037:1309): pid=3327 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:50.662374 sshd[3325]: pam_unix(sshd:session): session closed for user core Oct 2 20:37:50.663000 audit[3325]: USER_END pid=3325 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:50.666004 systemd[1]: sshd@25-10.200.8.16:22-10.200.12.6:52186.service: Deactivated successfully. Oct 2 20:37:50.666828 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 20:37:50.668352 systemd-logind[1309]: Session 28 logged out. Waiting for processes to exit. Oct 2 20:37:50.669263 systemd-logind[1309]: Removed session 28. Oct 2 20:37:50.663000 audit[3325]: CRED_DISP pid=3325 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:50.703989 kernel: audit: type=1106 audit(1696279070.663:1310): pid=3325 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:50.704166 kernel: audit: type=1104 audit(1696279070.663:1311): pid=3325 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:50.665000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.16:22-10.200.12.6:52186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:51.850841 kubelet[2448]: E1002 20:37:51.850804 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:56.851536 kubelet[2448]: E1002 20:37:56.851502 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:57.628333 kubelet[2448]: E1002 20:37:57.628282 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:38:00.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.16:22-10.200.12.6:34770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:00.824590 systemd[1]: Started sshd@26-10.200.8.16:22-10.200.12.6:34770.service. Oct 2 20:38:00.829521 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:38:00.829614 kernel: audit: type=1130 audit(1696279080.823:1313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.16:22-10.200.12.6:34770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:01.453000 audit[3338]: USER_ACCT pid=3338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:01.473589 sshd[3338]: Accepted publickey for core from 10.200.12.6 port 34770 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:38:01.474060 kernel: audit: type=1101 audit(1696279081.453:1314): pid=3338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:01.474059 sshd[3338]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:38:01.472000 audit[3338]: CRED_ACQ pid=3338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:01.479782 systemd-logind[1309]: New session 29 of user core. Oct 2 20:38:01.480119 systemd[1]: Started session-29.scope. Oct 2 20:38:01.501746 kernel: audit: type=1103 audit(1696279081.472:1315): pid=3338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:01.501884 kernel: audit: type=1006 audit(1696279081.472:1316): pid=3338 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 20:38:01.501913 kernel: audit: type=1300 audit(1696279081.472:1316): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe605d29c0 a2=3 a3=0 items=0 ppid=1 pid=3338 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:01.472000 audit[3338]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe605d29c0 a2=3 a3=0 items=0 ppid=1 pid=3338 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:01.472000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:38:01.525069 kernel: audit: type=1327 audit(1696279081.472:1316): proctitle=737368643A20636F7265205B707269765D Oct 2 20:38:01.525192 kernel: audit: type=1105 audit(1696279081.484:1317): pid=3338 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:01.484000 audit[3338]: USER_START pid=3338 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:01.484000 audit[3340]: CRED_ACQ pid=3340 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:01.560455 kernel: audit: type=1103 audit(1696279081.484:1318): pid=3340 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:01.853096 kubelet[2448]: E1002 20:38:01.853060 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:01.986310 sshd[3338]: pam_unix(sshd:session): session closed for user core Oct 2 20:38:01.986000 audit[3338]: USER_END pid=3338 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:01.989794 systemd-logind[1309]: Session 29 logged out. Waiting for processes to exit. Oct 2 20:38:01.991384 systemd[1]: sshd@26-10.200.8.16:22-10.200.12.6:34770.service: Deactivated successfully. Oct 2 20:38:01.992244 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 20:38:01.993827 systemd-logind[1309]: Removed session 29. Oct 2 20:38:01.986000 audit[3338]: CRED_DISP pid=3338 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:02.022662 kernel: audit: type=1106 audit(1696279081.986:1319): pid=3338 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:02.022805 kernel: audit: type=1104 audit(1696279081.986:1320): pid=3338 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:01.986000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.16:22-10.200.12.6:34770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:06.854438 kubelet[2448]: E1002 20:38:06.854401 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:11.855579 kubelet[2448]: E1002 20:38:11.855547 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:12.092445 systemd[1]: Started sshd@27-10.200.8.16:22-10.200.12.6:46888.service. Oct 2 20:38:12.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.16:22-10.200.12.6:46888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:12.098660 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:38:12.098738 kernel: audit: type=1130 audit(1696279092.092:1322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.16:22-10.200.12.6:46888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:12.631845 env[1325]: time="2023-10-02T20:38:12.631491461Z" level=info msg="CreateContainer within sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:6,}" Oct 2 20:38:12.671897 env[1325]: time="2023-10-02T20:38:12.671842657Z" level=info msg="CreateContainer within sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" for &ContainerMetadata{Name:mount-cgroup,Attempt:6,} returns container id \"74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4\"" Oct 2 20:38:12.672596 env[1325]: time="2023-10-02T20:38:12.672564166Z" level=info msg="StartContainer for \"74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4\"" Oct 2 20:38:12.697439 systemd[1]: run-containerd-runc-k8s.io-74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4-runc.QrGWsv.mount: Deactivated successfully. Oct 2 20:38:12.700517 systemd[1]: Started cri-containerd-74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4.scope. Oct 2 20:38:12.711756 systemd[1]: cri-containerd-74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4.scope: Deactivated successfully. Oct 2 20:38:12.712140 systemd[1]: Stopped cri-containerd-74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4.scope. Oct 2 20:38:12.743066 kernel: audit: type=1101 audit(1696279092.723:1323): pid=3349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:12.723000 audit[3349]: USER_ACCT pid=3349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:12.743352 sshd[3349]: Accepted publickey for core from 10.200.12.6 port 46888 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:38:12.741000 audit[3349]: CRED_ACQ pid=3349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:12.752926 systemd[1]: Started session-30.scope. Oct 2 20:38:12.743467 sshd[3349]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:38:12.753894 systemd-logind[1309]: New session 30 of user core. Oct 2 20:38:12.774055 kernel: audit: type=1103 audit(1696279092.741:1324): pid=3349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:12.774240 kernel: audit: type=1006 audit(1696279092.742:1325): pid=3349 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 20:38:12.774293 kernel: audit: type=1300 audit(1696279092.742:1325): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd6a27010 a2=3 a3=0 items=0 ppid=1 pid=3349 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:12.742000 audit[3349]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd6a27010 a2=3 a3=0 items=0 ppid=1 pid=3349 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:12.794457 kernel: audit: type=1327 audit(1696279092.742:1325): proctitle=737368643A20636F7265205B707269765D Oct 2 20:38:12.742000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:38:12.759000 audit[3349]: USER_START pid=3349 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:12.817904 kernel: audit: type=1105 audit(1696279092.759:1326): pid=3349 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:12.818882 kernel: audit: type=1103 audit(1696279092.762:1327): pid=3375 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:12.762000 audit[3375]: CRED_ACQ pid=3375 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:12.822370 env[1325]: time="2023-10-02T20:38:12.822327906Z" level=info msg="shim disconnected" id=74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4 Oct 2 20:38:12.822908 env[1325]: time="2023-10-02T20:38:12.822860913Z" level=warning msg="cleaning up after shim disconnected" id=74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4 namespace=k8s.io Oct 2 20:38:12.823015 env[1325]: time="2023-10-02T20:38:12.823002515Z" level=info msg="cleaning up dead shim" Oct 2 20:38:12.832776 env[1325]: time="2023-10-02T20:38:12.832728034Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3376 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:38:12Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:38:12.833323 env[1325]: time="2023-10-02T20:38:12.833259141Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 20:38:12.834241 env[1325]: time="2023-10-02T20:38:12.834198152Z" level=error msg="Failed to pipe stdout of container \"74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4\"" error="reading from a closed fifo" Oct 2 20:38:12.834411 env[1325]: time="2023-10-02T20:38:12.834379555Z" level=error msg="Failed to pipe stderr of container \"74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4\"" error="reading from a closed fifo" Oct 2 20:38:12.844113 env[1325]: time="2023-10-02T20:38:12.844068874Z" level=error msg="StartContainer for \"74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:38:12.844294 kubelet[2448]: E1002 20:38:12.844272 2448 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4" Oct 2 20:38:12.844404 kubelet[2448]: E1002 20:38:12.844392 2448 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:38:12.844404 kubelet[2448]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:38:12.844404 kubelet[2448]: rm /hostbin/cilium-mount Oct 2 20:38:12.844404 kubelet[2448]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9mjss,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:38:12.844656 kubelet[2448]: E1002 20:38:12.844442 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:38:13.187000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:13.205172 kernel: audit: type=1400 audit(1696279093.187:1328): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:13.205304 kernel: audit: type=1400 audit(1696279093.187:1329): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:13.187000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:13.187000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00142da20 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:38:13.187000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:13.187000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0020480c0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:38:13.187000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:13.231000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:13.231000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:13.231000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c007fc9e20 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:38:13.231000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00d2b60f0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:38:13.231000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:13.231000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:13.240000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:13.240000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00da0b530 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:38:13.240000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:13.321000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:13.321000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:13.321000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c008038240 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:38:13.321000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00d2b64b0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:38:13.321000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:13.321000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:13.322000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:13.322000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00da0b710 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:38:13.322000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:13.400079 kubelet[2448]: I1002 20:38:13.400039 2448 scope.go:117] "RemoveContainer" containerID="0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b" Oct 2 20:38:13.400518 kubelet[2448]: I1002 20:38:13.400485 2448 scope.go:117] "RemoveContainer" containerID="0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b" Oct 2 20:38:13.405241 env[1325]: time="2023-10-02T20:38:13.405205184Z" level=info msg="RemoveContainer for \"0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b\"" Oct 2 20:38:13.405836 env[1325]: time="2023-10-02T20:38:13.405807405Z" level=info msg="RemoveContainer for \"0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b\"" Oct 2 20:38:13.406144 env[1325]: time="2023-10-02T20:38:13.406108715Z" level=error msg="RemoveContainer for \"0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b\" failed" error="failed to set removing state for container \"0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b\": container is already in removing state" Oct 2 20:38:13.406567 kubelet[2448]: E1002 20:38:13.406545 2448 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b\": container is already in removing state" containerID="0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b" Oct 2 20:38:13.406666 kubelet[2448]: E1002 20:38:13.406583 2448 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b": container is already in removing state; Skipping pod "cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)" Oct 2 20:38:13.409539 kubelet[2448]: E1002 20:38:13.407237 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 5m0s restarting failed container=mount-cgroup pod=cilium-h6ptb_kube-system(788f4114-8c97-4ea0-ba33-c33540486cf1)\"" pod="kube-system/cilium-h6ptb" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" Oct 2 20:38:13.413064 sshd[3349]: pam_unix(sshd:session): session closed for user core Oct 2 20:38:13.413000 audit[3349]: USER_END pid=3349 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:13.413000 audit[3349]: CRED_DISP pid=3349 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:13.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.16:22-10.200.12.6:46888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:13.416310 systemd[1]: sshd@27-10.200.8.16:22-10.200.12.6:46888.service: Deactivated successfully. Oct 2 20:38:13.417288 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:38:13.419548 systemd-logind[1309]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:38:13.424157 systemd-logind[1309]: Removed session 30. Oct 2 20:38:13.430412 env[1325]: time="2023-10-02T20:38:13.430371450Z" level=info msg="RemoveContainer for \"0c5c6ab1fde26cb05b1253348af8945bab7cfa9b78c14c0f75c080066d7d8f6b\" returns successfully" Oct 2 20:38:13.513268 systemd[1]: Started sshd@28-10.200.8.16:22-10.200.12.6:46898.service. Oct 2 20:38:13.512000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.16:22-10.200.12.6:46898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:13.656279 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4-rootfs.mount: Deactivated successfully. Oct 2 20:38:14.154000 audit[3398]: USER_ACCT pid=3398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:14.155321 sshd[3398]: Accepted publickey for core from 10.200.12.6 port 46898 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:38:14.155000 audit[3398]: CRED_ACQ pid=3398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:14.155000 audit[3398]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd17590970 a2=3 a3=0 items=0 ppid=1 pid=3398 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:14.155000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:38:14.156873 sshd[3398]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:38:14.162300 systemd[1]: Started session-31.scope. Oct 2 20:38:14.162975 systemd-logind[1309]: New session 31 of user core. Oct 2 20:38:14.167000 audit[3398]: USER_START pid=3398 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:14.168000 audit[3400]: CRED_ACQ pid=3400 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:15.928801 kubelet[2448]: W1002 20:38:15.928751 2448 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod788f4114_8c97_4ea0_ba33_c33540486cf1.slice/cri-containerd-74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4.scope WatchSource:0}: task 74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4 not found: not found Oct 2 20:38:16.005032 env[1325]: time="2023-10-02T20:38:16.004753843Z" level=info msg="StopPodSandbox for \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\"" Oct 2 20:38:16.005032 env[1325]: time="2023-10-02T20:38:16.004870847Z" level=info msg="Container to stop \"74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:38:16.009594 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b-shm.mount: Deactivated successfully. Oct 2 20:38:16.024000 audit: BPF prog-id=111 op=UNLOAD Oct 2 20:38:16.025685 systemd[1]: cri-containerd-f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b.scope: Deactivated successfully. Oct 2 20:38:16.031000 audit: BPF prog-id=114 op=UNLOAD Oct 2 20:38:16.042153 env[1325]: time="2023-10-02T20:38:16.039433218Z" level=info msg="StopContainer for \"82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814\" with timeout 30 (s)" Oct 2 20:38:16.042153 env[1325]: time="2023-10-02T20:38:16.039789630Z" level=info msg="Stop container \"82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814\" with signal terminated" Oct 2 20:38:16.050000 audit: BPF prog-id=122 op=UNLOAD Oct 2 20:38:16.050800 systemd[1]: cri-containerd-82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814.scope: Deactivated successfully. Oct 2 20:38:16.052000 audit: BPF prog-id=125 op=UNLOAD Oct 2 20:38:16.062470 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b-rootfs.mount: Deactivated successfully. Oct 2 20:38:16.079044 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814-rootfs.mount: Deactivated successfully. Oct 2 20:38:16.124133 env[1325]: time="2023-10-02T20:38:16.124051183Z" level=info msg="shim disconnected" id=f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b Oct 2 20:38:16.125131 env[1325]: time="2023-10-02T20:38:16.125082518Z" level=warning msg="cleaning up after shim disconnected" id=f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b namespace=k8s.io Oct 2 20:38:16.125387 env[1325]: time="2023-10-02T20:38:16.125362727Z" level=info msg="cleaning up dead shim" Oct 2 20:38:16.125549 env[1325]: time="2023-10-02T20:38:16.124134386Z" level=info msg="shim disconnected" id=82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814 Oct 2 20:38:16.125720 env[1325]: time="2023-10-02T20:38:16.125681938Z" level=warning msg="cleaning up after shim disconnected" id=82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814 namespace=k8s.io Oct 2 20:38:16.125852 env[1325]: time="2023-10-02T20:38:16.125832043Z" level=info msg="cleaning up dead shim" Oct 2 20:38:16.137189 env[1325]: time="2023-10-02T20:38:16.137140426Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3446 runtime=io.containerd.runc.v2\n" Oct 2 20:38:16.137552 env[1325]: time="2023-10-02T20:38:16.137511438Z" level=info msg="TearDown network for sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" successfully" Oct 2 20:38:16.137673 env[1325]: time="2023-10-02T20:38:16.137551040Z" level=info msg="StopPodSandbox for \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" returns successfully" Oct 2 20:38:16.142553 env[1325]: time="2023-10-02T20:38:16.142512408Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3447 runtime=io.containerd.runc.v2\n" Oct 2 20:38:16.148038 env[1325]: time="2023-10-02T20:38:16.147985093Z" level=info msg="StopContainer for \"82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814\" returns successfully" Oct 2 20:38:16.148417 env[1325]: time="2023-10-02T20:38:16.148386807Z" level=info msg="StopPodSandbox for \"841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a\"" Oct 2 20:38:16.148510 env[1325]: time="2023-10-02T20:38:16.148445009Z" level=info msg="Container to stop \"82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:38:16.150441 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a-shm.mount: Deactivated successfully. Oct 2 20:38:16.157496 systemd[1]: cri-containerd-841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a.scope: Deactivated successfully. Oct 2 20:38:16.156000 audit: BPF prog-id=118 op=UNLOAD Oct 2 20:38:16.161000 audit: BPF prog-id=121 op=UNLOAD Oct 2 20:38:16.180074 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a-rootfs.mount: Deactivated successfully. Oct 2 20:38:16.194143 env[1325]: time="2023-10-02T20:38:16.194092754Z" level=info msg="shim disconnected" id=841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a Oct 2 20:38:16.194143 env[1325]: time="2023-10-02T20:38:16.194141756Z" level=warning msg="cleaning up after shim disconnected" id=841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a namespace=k8s.io Oct 2 20:38:16.194443 env[1325]: time="2023-10-02T20:38:16.194152756Z" level=info msg="cleaning up dead shim" Oct 2 20:38:16.203108 env[1325]: time="2023-10-02T20:38:16.203054558Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3492 runtime=io.containerd.runc.v2\n" Oct 2 20:38:16.203443 env[1325]: time="2023-10-02T20:38:16.203407170Z" level=info msg="TearDown network for sandbox \"841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a\" successfully" Oct 2 20:38:16.203540 env[1325]: time="2023-10-02T20:38:16.203442471Z" level=info msg="StopPodSandbox for \"841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a\" returns successfully" Oct 2 20:38:16.328018 kubelet[2448]: I1002 20:38:16.326805 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/788f4114-8c97-4ea0-ba33-c33540486cf1-clustermesh-secrets\") pod \"788f4114-8c97-4ea0-ba33-c33540486cf1\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " Oct 2 20:38:16.328018 kubelet[2448]: I1002 20:38:16.326869 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-host-proc-sys-net\") pod \"788f4114-8c97-4ea0-ba33-c33540486cf1\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " Oct 2 20:38:16.328018 kubelet[2448]: I1002 20:38:16.326904 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-xtables-lock\") pod \"788f4114-8c97-4ea0-ba33-c33540486cf1\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " Oct 2 20:38:16.328018 kubelet[2448]: I1002 20:38:16.326935 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-bpf-maps\") pod \"788f4114-8c97-4ea0-ba33-c33540486cf1\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " Oct 2 20:38:16.328018 kubelet[2448]: I1002 20:38:16.326968 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-hostproc\") pod \"788f4114-8c97-4ea0-ba33-c33540486cf1\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " Oct 2 20:38:16.328018 kubelet[2448]: I1002 20:38:16.327027 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-etc-cni-netd\") pod \"788f4114-8c97-4ea0-ba33-c33540486cf1\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " Oct 2 20:38:16.328018 kubelet[2448]: I1002 20:38:16.327065 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-cilium-run\") pod \"788f4114-8c97-4ea0-ba33-c33540486cf1\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " Oct 2 20:38:16.328018 kubelet[2448]: I1002 20:38:16.327101 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/788f4114-8c97-4ea0-ba33-c33540486cf1-cilium-config-path\") pod \"788f4114-8c97-4ea0-ba33-c33540486cf1\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " Oct 2 20:38:16.328018 kubelet[2448]: I1002 20:38:16.327137 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-cni-path\") pod \"788f4114-8c97-4ea0-ba33-c33540486cf1\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " Oct 2 20:38:16.328018 kubelet[2448]: I1002 20:38:16.327171 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-lib-modules\") pod \"788f4114-8c97-4ea0-ba33-c33540486cf1\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " Oct 2 20:38:16.328018 kubelet[2448]: I1002 20:38:16.327208 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/788f4114-8c97-4ea0-ba33-c33540486cf1-hubble-tls\") pod \"788f4114-8c97-4ea0-ba33-c33540486cf1\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " Oct 2 20:38:16.328018 kubelet[2448]: I1002 20:38:16.327241 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-cilium-cgroup\") pod \"788f4114-8c97-4ea0-ba33-c33540486cf1\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " Oct 2 20:38:16.328018 kubelet[2448]: I1002 20:38:16.327278 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-vb8l4\" (UniqueName: \"kubernetes.io/projected/ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4-kube-api-access-vb8l4\") pod \"ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4\" (UID: \"ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4\") " Oct 2 20:38:16.328018 kubelet[2448]: I1002 20:38:16.327314 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4-cilium-config-path\") pod \"ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4\" (UID: \"ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4\") " Oct 2 20:38:16.328018 kubelet[2448]: I1002 20:38:16.327347 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-host-proc-sys-kernel\") pod \"788f4114-8c97-4ea0-ba33-c33540486cf1\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " Oct 2 20:38:16.328018 kubelet[2448]: I1002 20:38:16.327380 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-9mjss\" (UniqueName: \"kubernetes.io/projected/788f4114-8c97-4ea0-ba33-c33540486cf1-kube-api-access-9mjss\") pod \"788f4114-8c97-4ea0-ba33-c33540486cf1\" (UID: \"788f4114-8c97-4ea0-ba33-c33540486cf1\") " Oct 2 20:38:16.329922 kubelet[2448]: I1002 20:38:16.329237 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-cni-path" (OuterVolumeSpecName: "cni-path") pod "788f4114-8c97-4ea0-ba33-c33540486cf1" (UID: "788f4114-8c97-4ea0-ba33-c33540486cf1"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:16.329922 kubelet[2448]: I1002 20:38:16.329312 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "788f4114-8c97-4ea0-ba33-c33540486cf1" (UID: "788f4114-8c97-4ea0-ba33-c33540486cf1"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:16.332292 kubelet[2448]: I1002 20:38:16.332251 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "788f4114-8c97-4ea0-ba33-c33540486cf1" (UID: "788f4114-8c97-4ea0-ba33-c33540486cf1"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:16.333663 kubelet[2448]: I1002 20:38:16.333631 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/788f4114-8c97-4ea0-ba33-c33540486cf1-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "788f4114-8c97-4ea0-ba33-c33540486cf1" (UID: "788f4114-8c97-4ea0-ba33-c33540486cf1"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:38:16.333965 kubelet[2448]: I1002 20:38:16.333941 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "788f4114-8c97-4ea0-ba33-c33540486cf1" (UID: "788f4114-8c97-4ea0-ba33-c33540486cf1"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:16.334249 kubelet[2448]: I1002 20:38:16.334207 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "788f4114-8c97-4ea0-ba33-c33540486cf1" (UID: "788f4114-8c97-4ea0-ba33-c33540486cf1"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:16.334529 kubelet[2448]: I1002 20:38:16.334488 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "788f4114-8c97-4ea0-ba33-c33540486cf1" (UID: "788f4114-8c97-4ea0-ba33-c33540486cf1"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:16.334644 kubelet[2448]: I1002 20:38:16.334629 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-hostproc" (OuterVolumeSpecName: "hostproc") pod "788f4114-8c97-4ea0-ba33-c33540486cf1" (UID: "788f4114-8c97-4ea0-ba33-c33540486cf1"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:16.334762 kubelet[2448]: I1002 20:38:16.334747 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "788f4114-8c97-4ea0-ba33-c33540486cf1" (UID: "788f4114-8c97-4ea0-ba33-c33540486cf1"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:16.334884 kubelet[2448]: I1002 20:38:16.334869 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "788f4114-8c97-4ea0-ba33-c33540486cf1" (UID: "788f4114-8c97-4ea0-ba33-c33540486cf1"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:16.335072 kubelet[2448]: I1002 20:38:16.335050 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/788f4114-8c97-4ea0-ba33-c33540486cf1-kube-api-access-9mjss" (OuterVolumeSpecName: "kube-api-access-9mjss") pod "788f4114-8c97-4ea0-ba33-c33540486cf1" (UID: "788f4114-8c97-4ea0-ba33-c33540486cf1"). InnerVolumeSpecName "kube-api-access-9mjss". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:38:16.338100 kubelet[2448]: I1002 20:38:16.337452 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "788f4114-8c97-4ea0-ba33-c33540486cf1" (UID: "788f4114-8c97-4ea0-ba33-c33540486cf1"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:16.338224 kubelet[2448]: I1002 20:38:16.337519 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/788f4114-8c97-4ea0-ba33-c33540486cf1-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "788f4114-8c97-4ea0-ba33-c33540486cf1" (UID: "788f4114-8c97-4ea0-ba33-c33540486cf1"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:38:16.338314 kubelet[2448]: I1002 20:38:16.338039 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4" (UID: "ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:38:16.338491 kubelet[2448]: I1002 20:38:16.338456 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4-kube-api-access-vb8l4" (OuterVolumeSpecName: "kube-api-access-vb8l4") pod "ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4" (UID: "ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4"). InnerVolumeSpecName "kube-api-access-vb8l4". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:38:16.339951 kubelet[2448]: I1002 20:38:16.339924 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/788f4114-8c97-4ea0-ba33-c33540486cf1-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "788f4114-8c97-4ea0-ba33-c33540486cf1" (UID: "788f4114-8c97-4ea0-ba33-c33540486cf1"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:38:16.409357 kubelet[2448]: I1002 20:38:16.409323 2448 scope.go:117] "RemoveContainer" containerID="82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814" Oct 2 20:38:16.414174 systemd[1]: Removed slice kubepods-besteffort-podee6e0533_fe72_4ea0_9ac8_9bd6d62ac7f4.slice. Oct 2 20:38:16.414887 env[1325]: time="2023-10-02T20:38:16.414249809Z" level=info msg="RemoveContainer for \"82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814\"" Oct 2 20:38:16.420440 systemd[1]: Removed slice kubepods-burstable-pod788f4114_8c97_4ea0_ba33_c33540486cf1.slice. Oct 2 20:38:16.425840 env[1325]: time="2023-10-02T20:38:16.425793400Z" level=info msg="RemoveContainer for \"82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814\" returns successfully" Oct 2 20:38:16.426175 kubelet[2448]: I1002 20:38:16.426151 2448 scope.go:117] "RemoveContainer" containerID="82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814" Oct 2 20:38:16.426547 env[1325]: time="2023-10-02T20:38:16.426460422Z" level=error msg="ContainerStatus for \"82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814\": not found" Oct 2 20:38:16.427354 kubelet[2448]: E1002 20:38:16.427335 2448 remote_runtime.go:432] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814\": not found" containerID="82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814" Oct 2 20:38:16.427525 kubelet[2448]: I1002 20:38:16.427505 2448 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-cilium-cgroup\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:38:16.427601 kubelet[2448]: I1002 20:38:16.427538 2448 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-vb8l4\" (UniqueName: \"kubernetes.io/projected/ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4-kube-api-access-vb8l4\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:38:16.427601 kubelet[2448]: I1002 20:38:16.427554 2448 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4-cilium-config-path\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:38:16.427601 kubelet[2448]: I1002 20:38:16.427568 2448 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:38:16.427601 kubelet[2448]: I1002 20:38:16.427586 2448 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-9mjss\" (UniqueName: \"kubernetes.io/projected/788f4114-8c97-4ea0-ba33-c33540486cf1-kube-api-access-9mjss\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:38:16.427601 kubelet[2448]: I1002 20:38:16.427601 2448 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/788f4114-8c97-4ea0-ba33-c33540486cf1-clustermesh-secrets\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:38:16.427792 kubelet[2448]: I1002 20:38:16.427617 2448 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-host-proc-sys-net\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:38:16.427792 kubelet[2448]: I1002 20:38:16.427632 2448 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-xtables-lock\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:38:16.427792 kubelet[2448]: I1002 20:38:16.427646 2448 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-bpf-maps\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:38:16.427911 kubelet[2448]: I1002 20:38:16.427507 2448 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814"} err="failed to get container status \"82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814\": rpc error: code = NotFound desc = an error occurred when try to find container \"82bab2eca167e379989439b4a97bf4919dec1a18b2c34e6e27ea03b3ed433814\": not found" Oct 2 20:38:16.428020 kubelet[2448]: I1002 20:38:16.427990 2448 scope.go:117] "RemoveContainer" containerID="74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4" Oct 2 20:38:16.428181 kubelet[2448]: I1002 20:38:16.427914 2448 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-hostproc\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:38:16.428250 kubelet[2448]: I1002 20:38:16.428188 2448 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-etc-cni-netd\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:38:16.428250 kubelet[2448]: I1002 20:38:16.428205 2448 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-cilium-run\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:38:16.428250 kubelet[2448]: I1002 20:38:16.428220 2448 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/788f4114-8c97-4ea0-ba33-c33540486cf1-cilium-config-path\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:38:16.428250 kubelet[2448]: I1002 20:38:16.428234 2448 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-cni-path\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:38:16.428250 kubelet[2448]: I1002 20:38:16.428249 2448 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/788f4114-8c97-4ea0-ba33-c33540486cf1-lib-modules\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:38:16.428457 kubelet[2448]: I1002 20:38:16.428263 2448 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/788f4114-8c97-4ea0-ba33-c33540486cf1-hubble-tls\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:38:16.429664 env[1325]: time="2023-10-02T20:38:16.429632029Z" level=info msg="RemoveContainer for \"74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4\"" Oct 2 20:38:16.439536 env[1325]: time="2023-10-02T20:38:16.439378359Z" level=info msg="RemoveContainer for \"74e9e09ce6bf9553de41a3042e6774cb07d78776cf6beb68cf1d660fb588b7b4\" returns successfully" Oct 2 20:38:16.631690 kubelet[2448]: I1002 20:38:16.631658 2448 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" path="/var/lib/kubelet/pods/788f4114-8c97-4ea0-ba33-c33540486cf1/volumes" Oct 2 20:38:16.632172 kubelet[2448]: I1002 20:38:16.632148 2448 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4" path="/var/lib/kubelet/pods/ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4/volumes" Oct 2 20:38:16.634922 env[1325]: time="2023-10-02T20:38:16.634701073Z" level=info msg="StopPodSandbox for \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\"" Oct 2 20:38:16.634922 env[1325]: time="2023-10-02T20:38:16.634799676Z" level=info msg="TearDown network for sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" successfully" Oct 2 20:38:16.634922 env[1325]: time="2023-10-02T20:38:16.634841678Z" level=info msg="StopPodSandbox for \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" returns successfully" Oct 2 20:38:16.635703 env[1325]: time="2023-10-02T20:38:16.635664006Z" level=info msg="RemovePodSandbox for \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\"" Oct 2 20:38:16.635838 env[1325]: time="2023-10-02T20:38:16.635707207Z" level=info msg="Forcibly stopping sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\"" Oct 2 20:38:16.635838 env[1325]: time="2023-10-02T20:38:16.635815911Z" level=info msg="TearDown network for sandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" successfully" Oct 2 20:38:16.645564 env[1325]: time="2023-10-02T20:38:16.645525839Z" level=info msg="RemovePodSandbox \"f43c6577d28647a8b67ff2c16c7bda9aa2ee1a11df87a060b9645383b28f434b\" returns successfully" Oct 2 20:38:16.646409 env[1325]: time="2023-10-02T20:38:16.646238964Z" level=info msg="StopPodSandbox for \"841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a\"" Oct 2 20:38:16.646409 env[1325]: time="2023-10-02T20:38:16.646317166Z" level=info msg="TearDown network for sandbox \"841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a\" successfully" Oct 2 20:38:16.646409 env[1325]: time="2023-10-02T20:38:16.646356968Z" level=info msg="StopPodSandbox for \"841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a\" returns successfully" Oct 2 20:38:16.647793 env[1325]: time="2023-10-02T20:38:16.646789582Z" level=info msg="RemovePodSandbox for \"841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a\"" Oct 2 20:38:16.647793 env[1325]: time="2023-10-02T20:38:16.646816583Z" level=info msg="Forcibly stopping sandbox \"841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a\"" Oct 2 20:38:16.647793 env[1325]: time="2023-10-02T20:38:16.646885086Z" level=info msg="TearDown network for sandbox \"841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a\" successfully" Oct 2 20:38:16.664146 env[1325]: time="2023-10-02T20:38:16.664085568Z" level=info msg="RemovePodSandbox \"841c259ab4dc582a12ebb395cb9eb13b39e86b3b9c212d7a79dc811286fc815a\" returns successfully" Oct 2 20:38:16.856716 kubelet[2448]: E1002 20:38:16.856686 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:17.009069 systemd[1]: var-lib-kubelet-pods-ee6e0533\x2dfe72\x2d4ea0\x2d9ac8\x2d9bd6d62ac7f4-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dvb8l4.mount: Deactivated successfully. Oct 2 20:38:17.009196 systemd[1]: var-lib-kubelet-pods-788f4114\x2d8c97\x2d4ea0\x2dba33\x2dc33540486cf1-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d9mjss.mount: Deactivated successfully. Oct 2 20:38:17.009274 systemd[1]: var-lib-kubelet-pods-788f4114\x2d8c97\x2d4ea0\x2dba33\x2dc33540486cf1-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:38:17.009349 systemd[1]: var-lib-kubelet-pods-788f4114\x2d8c97\x2d4ea0\x2dba33\x2dc33540486cf1-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:38:18.072641 sshd[3398]: pam_unix(sshd:session): session closed for user core Oct 2 20:38:18.073000 audit[3398]: USER_END pid=3398 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:18.076378 systemd[1]: sshd@28-10.200.8.16:22-10.200.12.6:46898.service: Deactivated successfully. Oct 2 20:38:18.077228 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 20:38:18.079719 kernel: kauditd_printk_skb: 39 callbacks suppressed Oct 2 20:38:18.079804 kernel: audit: type=1106 audit(1696279098.073:1351): pid=3398 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:18.079293 systemd-logind[1309]: Session 31 logged out. Waiting for processes to exit. Oct 2 20:38:18.080757 systemd-logind[1309]: Removed session 31. Oct 2 20:38:18.073000 audit[3398]: CRED_DISP pid=3398 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:18.113928 kernel: audit: type=1104 audit(1696279098.073:1352): pid=3398 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:18.114059 kernel: audit: type=1131 audit(1696279098.075:1353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.16:22-10.200.12.6:46898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:18.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.16:22-10.200.12.6:46898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:18.177302 systemd[1]: Started sshd@29-10.200.8.16:22-10.200.12.6:37972.service. Oct 2 20:38:18.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.16:22-10.200.12.6:37972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:18.197038 kernel: audit: type=1130 audit(1696279098.176:1354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.16:22-10.200.12.6:37972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:18.799000 audit[3514]: USER_ACCT pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:18.820860 sshd[3514]: Accepted publickey for core from 10.200.12.6 port 37972 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:38:18.821233 kernel: audit: type=1101 audit(1696279098.799:1355): pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:18.819000 audit[3514]: CRED_ACQ pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:18.821532 sshd[3514]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:38:18.829071 systemd[1]: Started session-32.scope. Oct 2 20:38:18.830363 systemd-logind[1309]: New session 32 of user core. Oct 2 20:38:18.841223 kernel: audit: type=1103 audit(1696279098.819:1356): pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:18.841302 kernel: audit: type=1006 audit(1696279098.820:1357): pid=3514 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Oct 2 20:38:18.820000 audit[3514]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff3fde52a0 a2=3 a3=0 items=0 ppid=1 pid=3514 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:18.870597 kernel: audit: type=1300 audit(1696279098.820:1357): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff3fde52a0 a2=3 a3=0 items=0 ppid=1 pid=3514 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:18.820000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:38:18.877168 kernel: audit: type=1327 audit(1696279098.820:1357): proctitle=737368643A20636F7265205B707269765D Oct 2 20:38:18.877295 kernel: audit: type=1105 audit(1696279098.835:1358): pid=3514 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:18.835000 audit[3514]: USER_START pid=3514 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:18.840000 audit[3516]: CRED_ACQ pid=3516 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:19.575474 kubelet[2448]: I1002 20:38:19.575427 2448 topology_manager.go:215] "Topology Admit Handler" podUID="f26e7586-d541-4b93-b2a4-840e30aa56ae" podNamespace="kube-system" podName="cilium-dxwwv" Oct 2 20:38:19.575948 kubelet[2448]: E1002 20:38:19.575527 2448 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4" containerName="cilium-operator" Oct 2 20:38:19.575948 kubelet[2448]: E1002 20:38:19.575542 2448 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" containerName="mount-cgroup" Oct 2 20:38:19.575948 kubelet[2448]: E1002 20:38:19.575550 2448 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" containerName="mount-cgroup" Oct 2 20:38:19.575948 kubelet[2448]: E1002 20:38:19.575564 2448 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" containerName="mount-cgroup" Oct 2 20:38:19.575948 kubelet[2448]: E1002 20:38:19.575574 2448 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" containerName="mount-cgroup" Oct 2 20:38:19.575948 kubelet[2448]: I1002 20:38:19.575612 2448 memory_manager.go:346] "RemoveStaleState removing state" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" containerName="mount-cgroup" Oct 2 20:38:19.575948 kubelet[2448]: I1002 20:38:19.575751 2448 memory_manager.go:346] "RemoveStaleState removing state" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" containerName="mount-cgroup" Oct 2 20:38:19.575948 kubelet[2448]: I1002 20:38:19.575762 2448 memory_manager.go:346] "RemoveStaleState removing state" podUID="ee6e0533-fe72-4ea0-9ac8-9bd6d62ac7f4" containerName="cilium-operator" Oct 2 20:38:19.575948 kubelet[2448]: I1002 20:38:19.575772 2448 memory_manager.go:346] "RemoveStaleState removing state" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" containerName="mount-cgroup" Oct 2 20:38:19.575948 kubelet[2448]: I1002 20:38:19.575786 2448 memory_manager.go:346] "RemoveStaleState removing state" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" containerName="mount-cgroup" Oct 2 20:38:19.575948 kubelet[2448]: I1002 20:38:19.575795 2448 memory_manager.go:346] "RemoveStaleState removing state" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" containerName="mount-cgroup" Oct 2 20:38:19.575948 kubelet[2448]: I1002 20:38:19.575806 2448 memory_manager.go:346] "RemoveStaleState removing state" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" containerName="mount-cgroup" Oct 2 20:38:19.576491 kubelet[2448]: E1002 20:38:19.575985 2448 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" containerName="mount-cgroup" Oct 2 20:38:19.576491 kubelet[2448]: E1002 20:38:19.576013 2448 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" containerName="mount-cgroup" Oct 2 20:38:19.579115 kubelet[2448]: I1002 20:38:19.579087 2448 memory_manager.go:346] "RemoveStaleState removing state" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" containerName="mount-cgroup" Oct 2 20:38:19.579256 kubelet[2448]: E1002 20:38:19.579144 2448 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="788f4114-8c97-4ea0-ba33-c33540486cf1" containerName="mount-cgroup" Oct 2 20:38:19.590577 systemd[1]: Created slice kubepods-burstable-podf26e7586_d541_4b93_b2a4_840e30aa56ae.slice. Oct 2 20:38:19.748946 kubelet[2448]: I1002 20:38:19.748389 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-host-proc-sys-kernel\") pod \"cilium-dxwwv\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " pod="kube-system/cilium-dxwwv" Oct 2 20:38:19.748946 kubelet[2448]: I1002 20:38:19.748472 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/f26e7586-d541-4b93-b2a4-840e30aa56ae-hubble-tls\") pod \"cilium-dxwwv\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " pod="kube-system/cilium-dxwwv" Oct 2 20:38:19.748946 kubelet[2448]: I1002 20:38:19.748512 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-hostproc\") pod \"cilium-dxwwv\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " pod="kube-system/cilium-dxwwv" Oct 2 20:38:19.748946 kubelet[2448]: I1002 20:38:19.748538 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-lib-modules\") pod \"cilium-dxwwv\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " pod="kube-system/cilium-dxwwv" Oct 2 20:38:19.748946 kubelet[2448]: I1002 20:38:19.748564 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/f26e7586-d541-4b93-b2a4-840e30aa56ae-clustermesh-secrets\") pod \"cilium-dxwwv\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " pod="kube-system/cilium-dxwwv" Oct 2 20:38:19.748946 kubelet[2448]: I1002 20:38:19.748606 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-bpf-maps\") pod \"cilium-dxwwv\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " pod="kube-system/cilium-dxwwv" Oct 2 20:38:19.748946 kubelet[2448]: I1002 20:38:19.748630 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-xtables-lock\") pod \"cilium-dxwwv\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " pod="kube-system/cilium-dxwwv" Oct 2 20:38:19.748946 kubelet[2448]: I1002 20:38:19.748658 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/f26e7586-d541-4b93-b2a4-840e30aa56ae-cilium-config-path\") pod \"cilium-dxwwv\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " pod="kube-system/cilium-dxwwv" Oct 2 20:38:19.748946 kubelet[2448]: I1002 20:38:19.748690 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-cilium-run\") pod \"cilium-dxwwv\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " pod="kube-system/cilium-dxwwv" Oct 2 20:38:19.748946 kubelet[2448]: I1002 20:38:19.748716 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wwq6k\" (UniqueName: \"kubernetes.io/projected/f26e7586-d541-4b93-b2a4-840e30aa56ae-kube-api-access-wwq6k\") pod \"cilium-dxwwv\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " pod="kube-system/cilium-dxwwv" Oct 2 20:38:19.748946 kubelet[2448]: I1002 20:38:19.748748 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-host-proc-sys-net\") pod \"cilium-dxwwv\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " pod="kube-system/cilium-dxwwv" Oct 2 20:38:19.748946 kubelet[2448]: I1002 20:38:19.748795 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-cilium-cgroup\") pod \"cilium-dxwwv\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " pod="kube-system/cilium-dxwwv" Oct 2 20:38:19.748946 kubelet[2448]: I1002 20:38:19.748832 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-cni-path\") pod \"cilium-dxwwv\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " pod="kube-system/cilium-dxwwv" Oct 2 20:38:19.748946 kubelet[2448]: I1002 20:38:19.748869 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-etc-cni-netd\") pod \"cilium-dxwwv\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " pod="kube-system/cilium-dxwwv" Oct 2 20:38:19.748946 kubelet[2448]: I1002 20:38:19.748891 2448 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/f26e7586-d541-4b93-b2a4-840e30aa56ae-cilium-ipsec-secrets\") pod \"cilium-dxwwv\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " pod="kube-system/cilium-dxwwv" Oct 2 20:38:19.899067 env[1325]: time="2023-10-02T20:38:19.898179691Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-dxwwv,Uid:f26e7586-d541-4b93-b2a4-840e30aa56ae,Namespace:kube-system,Attempt:0,}" Oct 2 20:38:19.937266 env[1325]: time="2023-10-02T20:38:19.937199392Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:38:19.937464 env[1325]: time="2023-10-02T20:38:19.937233993Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:38:19.937464 env[1325]: time="2023-10-02T20:38:19.937247493Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:38:19.937464 env[1325]: time="2023-10-02T20:38:19.937376698Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508 pid=3534 runtime=io.containerd.runc.v2 Oct 2 20:38:19.950455 systemd[1]: Started cri-containerd-c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508.scope. Oct 2 20:38:19.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit: BPF prog-id=126 op=LOAD Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3534 pid=3545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336613735333561633137396532393431613165373039643335643135 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3534 pid=3545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336613735333561633137396532393431613165373039643335643135 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit: BPF prog-id=127 op=LOAD Oct 2 20:38:19.964000 audit[3545]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000288510 items=0 ppid=3534 pid=3545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336613735333561633137396532393431613165373039643335643135 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.964000 audit: BPF prog-id=128 op=LOAD Oct 2 20:38:19.964000 audit[3545]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000288558 items=0 ppid=3534 pid=3545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336613735333561633137396532393431613165373039643335643135 Oct 2 20:38:19.964000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:38:19.964000 audit: BPF prog-id=127 op=UNLOAD Oct 2 20:38:19.965000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.965000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.965000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.965000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.965000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.965000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.965000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.965000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.965000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.965000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:19.965000 audit: BPF prog-id=129 op=LOAD Oct 2 20:38:19.965000 audit[3545]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000288968 items=0 ppid=3534 pid=3545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336613735333561633137396532393431613165373039643335643135 Oct 2 20:38:19.979154 env[1325]: time="2023-10-02T20:38:19.979108089Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-dxwwv,Uid:f26e7586-d541-4b93-b2a4-840e30aa56ae,Namespace:kube-system,Attempt:0,} returns sandbox id \"c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508\"" Oct 2 20:38:19.988522 env[1325]: time="2023-10-02T20:38:19.988489202Z" level=info msg="CreateContainer within sandbox \"c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:38:20.024016 env[1325]: time="2023-10-02T20:38:20.023953180Z" level=info msg="CreateContainer within sandbox \"c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000\"" Oct 2 20:38:20.025836 env[1325]: time="2023-10-02T20:38:20.024539700Z" level=info msg="StartContainer for \"abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000\"" Oct 2 20:38:20.042671 systemd[1]: Started cri-containerd-abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000.scope. Oct 2 20:38:20.054297 systemd[1]: cri-containerd-abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000.scope: Deactivated successfully. Oct 2 20:38:20.135026 env[1325]: time="2023-10-02T20:38:20.134939862Z" level=info msg="shim disconnected" id=abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000 Oct 2 20:38:20.135026 env[1325]: time="2023-10-02T20:38:20.134992564Z" level=warning msg="cleaning up after shim disconnected" id=abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000 namespace=k8s.io Oct 2 20:38:20.135026 env[1325]: time="2023-10-02T20:38:20.135028565Z" level=info msg="cleaning up dead shim" Oct 2 20:38:20.143361 env[1325]: time="2023-10-02T20:38:20.143310940Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3595 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:38:20Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:38:20.143633 env[1325]: time="2023-10-02T20:38:20.143574949Z" level=error msg="copy shim log" error="read /proc/self/fd/39: file already closed" Oct 2 20:38:20.143857 env[1325]: time="2023-10-02T20:38:20.143822057Z" level=error msg="Failed to pipe stderr of container \"abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000\"" error="reading from a closed fifo" Oct 2 20:38:20.144304 env[1325]: time="2023-10-02T20:38:20.144262072Z" level=error msg="Failed to pipe stdout of container \"abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000\"" error="reading from a closed fifo" Oct 2 20:38:20.147885 env[1325]: time="2023-10-02T20:38:20.147839890Z" level=error msg="StartContainer for \"abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:38:20.148197 kubelet[2448]: E1002 20:38:20.148172 2448 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000" Oct 2 20:38:20.148339 kubelet[2448]: E1002 20:38:20.148296 2448 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:38:20.148339 kubelet[2448]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:38:20.148339 kubelet[2448]: rm /hostbin/cilium-mount Oct 2 20:38:20.148339 kubelet[2448]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wwq6k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-dxwwv_kube-system(f26e7586-d541-4b93-b2a4-840e30aa56ae): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:38:20.148577 kubelet[2448]: E1002 20:38:20.148351 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-dxwwv" podUID="f26e7586-d541-4b93-b2a4-840e30aa56ae" Oct 2 20:38:20.428613 env[1325]: time="2023-10-02T20:38:20.427398664Z" level=info msg="CreateContainer within sandbox \"c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:38:20.476329 env[1325]: time="2023-10-02T20:38:20.476276686Z" level=info msg="CreateContainer within sandbox \"c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb\"" Oct 2 20:38:20.477136 env[1325]: time="2023-10-02T20:38:20.477098913Z" level=info msg="StartContainer for \"cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb\"" Oct 2 20:38:20.494292 systemd[1]: Started cri-containerd-cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb.scope. Oct 2 20:38:20.506095 systemd[1]: cri-containerd-cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb.scope: Deactivated successfully. Oct 2 20:38:20.519929 env[1325]: time="2023-10-02T20:38:20.519856232Z" level=info msg="shim disconnected" id=cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb Oct 2 20:38:20.520179 env[1325]: time="2023-10-02T20:38:20.519931834Z" level=warning msg="cleaning up after shim disconnected" id=cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb namespace=k8s.io Oct 2 20:38:20.520179 env[1325]: time="2023-10-02T20:38:20.519943935Z" level=info msg="cleaning up dead shim" Oct 2 20:38:20.528019 env[1325]: time="2023-10-02T20:38:20.527966301Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3631 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:38:20Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:38:20.528307 env[1325]: time="2023-10-02T20:38:20.528245510Z" level=error msg="copy shim log" error="read /proc/self/fd/39: file already closed" Oct 2 20:38:20.529930 env[1325]: time="2023-10-02T20:38:20.529862364Z" level=error msg="Failed to pipe stdout of container \"cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb\"" error="reading from a closed fifo" Oct 2 20:38:20.530145 env[1325]: time="2023-10-02T20:38:20.530108572Z" level=error msg="Failed to pipe stderr of container \"cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb\"" error="reading from a closed fifo" Oct 2 20:38:20.533919 env[1325]: time="2023-10-02T20:38:20.533879097Z" level=error msg="StartContainer for \"cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:38:20.534186 kubelet[2448]: E1002 20:38:20.534165 2448 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb" Oct 2 20:38:20.534313 kubelet[2448]: E1002 20:38:20.534288 2448 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:38:20.534313 kubelet[2448]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:38:20.534313 kubelet[2448]: rm /hostbin/cilium-mount Oct 2 20:38:20.534313 kubelet[2448]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wwq6k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-dxwwv_kube-system(f26e7586-d541-4b93-b2a4-840e30aa56ae): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:38:20.534525 kubelet[2448]: E1002 20:38:20.534339 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-dxwwv" podUID="f26e7586-d541-4b93-b2a4-840e30aa56ae" Oct 2 20:38:21.428585 kubelet[2448]: I1002 20:38:21.428544 2448 scope.go:117] "RemoveContainer" containerID="abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000" Oct 2 20:38:21.429128 kubelet[2448]: I1002 20:38:21.429067 2448 scope.go:117] "RemoveContainer" containerID="abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000" Oct 2 20:38:21.431429 env[1325]: time="2023-10-02T20:38:21.430905683Z" level=info msg="RemoveContainer for \"abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000\"" Oct 2 20:38:21.432077 env[1325]: time="2023-10-02T20:38:21.431933116Z" level=info msg="RemoveContainer for \"abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000\"" Oct 2 20:38:21.432195 env[1325]: time="2023-10-02T20:38:21.432062721Z" level=error msg="RemoveContainer for \"abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000\" failed" error="failed to set removing state for container \"abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000\": container is already in removing state" Oct 2 20:38:21.432283 kubelet[2448]: E1002 20:38:21.432244 2448 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000\": container is already in removing state" containerID="abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000" Oct 2 20:38:21.432363 kubelet[2448]: E1002 20:38:21.432309 2448 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000": container is already in removing state; Skipping pod "cilium-dxwwv_kube-system(f26e7586-d541-4b93-b2a4-840e30aa56ae)" Oct 2 20:38:21.434039 kubelet[2448]: E1002 20:38:21.432707 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-dxwwv_kube-system(f26e7586-d541-4b93-b2a4-840e30aa56ae)\"" pod="kube-system/cilium-dxwwv" podUID="f26e7586-d541-4b93-b2a4-840e30aa56ae" Oct 2 20:38:21.445723 env[1325]: time="2023-10-02T20:38:21.445677970Z" level=info msg="RemoveContainer for \"abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000\" returns successfully" Oct 2 20:38:21.857562 kubelet[2448]: E1002 20:38:21.857526 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:23.241020 kubelet[2448]: W1002 20:38:23.240957 2448 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podf26e7586_d541_4b93_b2a4_840e30aa56ae.slice/cri-containerd-abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000.scope WatchSource:0}: container "abb2a14ff924c7d63bda678d1de2d8970cbb1bfd27b8d37553d76c27fcf0c000" in namespace "k8s.io": not found Oct 2 20:38:26.349493 kubelet[2448]: W1002 20:38:26.349435 2448 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podf26e7586_d541_4b93_b2a4_840e30aa56ae.slice/cri-containerd-cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb.scope WatchSource:0}: task cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb not found: not found Oct 2 20:38:26.858205 kubelet[2448]: E1002 20:38:26.858170 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:28.088000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:28.094533 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 20:38:28.094655 kernel: audit: type=1400 audit(1696279108.088:1378): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:28.088000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cd43e0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:38:28.134819 kernel: audit: type=1300 audit(1696279108.088:1378): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cd43e0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:38:28.088000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:28.109000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:28.177178 kernel: audit: type=1327 audit(1696279108.088:1378): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:28.177314 kernel: audit: type=1400 audit(1696279108.109:1379): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:28.109000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cd4420 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:38:28.178640 kernel: audit: type=1300 audit(1696279108.109:1379): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cd4420 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:38:28.109000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:28.224322 kernel: audit: type=1327 audit(1696279108.109:1379): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:28.224459 kernel: audit: type=1400 audit(1696279108.109:1380): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:28.109000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:28.109000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cd4460 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:38:28.262746 kernel: audit: type=1300 audit(1696279108.109:1380): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cd4460 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:38:28.262908 kernel: audit: type=1327 audit(1696279108.109:1380): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:28.109000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:28.110000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:28.110000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0009e0ea0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:38:28.110000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:28.297043 kernel: audit: type=1400 audit(1696279108.110:1381): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:31.859772 kubelet[2448]: E1002 20:38:31.859733 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:36.633278 env[1325]: time="2023-10-02T20:38:36.633083533Z" level=info msg="CreateContainer within sandbox \"c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:38:36.676303 env[1325]: time="2023-10-02T20:38:36.676248356Z" level=info msg="CreateContainer within sandbox \"c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e\"" Oct 2 20:38:36.677239 env[1325]: time="2023-10-02T20:38:36.677203785Z" level=info msg="StartContainer for \"fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e\"" Oct 2 20:38:36.706795 systemd[1]: Started cri-containerd-fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e.scope. Oct 2 20:38:36.720097 systemd[1]: cri-containerd-fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e.scope: Deactivated successfully. Oct 2 20:38:36.724407 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e-rootfs.mount: Deactivated successfully. Oct 2 20:38:36.772170 env[1325]: time="2023-10-02T20:38:36.772098492Z" level=info msg="shim disconnected" id=fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e Oct 2 20:38:36.772170 env[1325]: time="2023-10-02T20:38:36.772169294Z" level=warning msg="cleaning up after shim disconnected" id=fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e namespace=k8s.io Oct 2 20:38:36.772170 env[1325]: time="2023-10-02T20:38:36.772184295Z" level=info msg="cleaning up dead shim" Oct 2 20:38:36.782382 env[1325]: time="2023-10-02T20:38:36.782314705Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3669 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:38:36Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:38:36.782658 env[1325]: time="2023-10-02T20:38:36.782597114Z" level=error msg="copy shim log" error="read /proc/self/fd/39: file already closed" Oct 2 20:38:36.783081 env[1325]: time="2023-10-02T20:38:36.783042428Z" level=error msg="Failed to pipe stdout of container \"fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e\"" error="reading from a closed fifo" Oct 2 20:38:36.785082 env[1325]: time="2023-10-02T20:38:36.785042589Z" level=error msg="Failed to pipe stderr of container \"fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e\"" error="reading from a closed fifo" Oct 2 20:38:36.789323 env[1325]: time="2023-10-02T20:38:36.789277419Z" level=error msg="StartContainer for \"fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:38:36.789570 kubelet[2448]: E1002 20:38:36.789548 2448 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e" Oct 2 20:38:36.789981 kubelet[2448]: E1002 20:38:36.789679 2448 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:38:36.789981 kubelet[2448]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:38:36.789981 kubelet[2448]: rm /hostbin/cilium-mount Oct 2 20:38:36.789981 kubelet[2448]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wwq6k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-dxwwv_kube-system(f26e7586-d541-4b93-b2a4-840e30aa56ae): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:38:36.789981 kubelet[2448]: E1002 20:38:36.789755 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-dxwwv" podUID="f26e7586-d541-4b93-b2a4-840e30aa56ae" Oct 2 20:38:36.860754 kubelet[2448]: E1002 20:38:36.860716 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:37.463031 kubelet[2448]: I1002 20:38:37.462651 2448 scope.go:117] "RemoveContainer" containerID="cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb" Oct 2 20:38:37.463380 kubelet[2448]: I1002 20:38:37.463346 2448 scope.go:117] "RemoveContainer" containerID="cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb" Oct 2 20:38:37.465086 env[1325]: time="2023-10-02T20:38:37.465041954Z" level=info msg="RemoveContainer for \"cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb\"" Oct 2 20:38:37.465287 env[1325]: time="2023-10-02T20:38:37.465257161Z" level=info msg="RemoveContainer for \"cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb\"" Oct 2 20:38:37.465469 env[1325]: time="2023-10-02T20:38:37.465419866Z" level=error msg="RemoveContainer for \"cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb\" failed" error="failed to set removing state for container \"cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb\": container is already in removing state" Oct 2 20:38:37.465773 kubelet[2448]: E1002 20:38:37.465707 2448 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb\": container is already in removing state" containerID="cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb" Oct 2 20:38:37.465773 kubelet[2448]: I1002 20:38:37.465757 2448 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb"} err="rpc error: code = Unknown desc = failed to set removing state for container \"cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb\": container is already in removing state" Oct 2 20:38:37.474135 env[1325]: time="2023-10-02T20:38:37.474094830Z" level=info msg="RemoveContainer for \"cd755cd2cff81a4f7a2aadb419271da16de57c3c521ba3613a23b62de2b5b1bb\" returns successfully" Oct 2 20:38:37.474753 kubelet[2448]: E1002 20:38:37.474726 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-dxwwv_kube-system(f26e7586-d541-4b93-b2a4-840e30aa56ae)\"" pod="kube-system/cilium-dxwwv" podUID="f26e7586-d541-4b93-b2a4-840e30aa56ae" Oct 2 20:38:39.877289 kubelet[2448]: W1002 20:38:39.877235 2448 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podf26e7586_d541_4b93_b2a4_840e30aa56ae.slice/cri-containerd-fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e.scope WatchSource:0}: task fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e not found: not found Oct 2 20:38:41.862009 kubelet[2448]: E1002 20:38:41.861968 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:46.863177 kubelet[2448]: E1002 20:38:46.863131 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:47.629511 kubelet[2448]: E1002 20:38:47.628557 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-dxwwv_kube-system(f26e7586-d541-4b93-b2a4-840e30aa56ae)\"" pod="kube-system/cilium-dxwwv" podUID="f26e7586-d541-4b93-b2a4-840e30aa56ae" Oct 2 20:38:51.864439 kubelet[2448]: E1002 20:38:51.864399 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:56.865773 kubelet[2448]: E1002 20:38:56.865720 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:59.631248 env[1325]: time="2023-10-02T20:38:59.631195684Z" level=info msg="CreateContainer within sandbox \"c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:38:59.661456 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount63292781.mount: Deactivated successfully. Oct 2 20:38:59.668866 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2225181007.mount: Deactivated successfully. Oct 2 20:38:59.697592 env[1325]: time="2023-10-02T20:38:59.697536209Z" level=info msg="CreateContainer within sandbox \"c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6\"" Oct 2 20:38:59.699935 env[1325]: time="2023-10-02T20:38:59.698572937Z" level=info msg="StartContainer for \"3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6\"" Oct 2 20:38:59.718846 systemd[1]: Started cri-containerd-3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6.scope. Oct 2 20:38:59.730431 systemd[1]: cri-containerd-3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6.scope: Deactivated successfully. Oct 2 20:38:59.762330 env[1325]: time="2023-10-02T20:38:59.762259589Z" level=info msg="shim disconnected" id=3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6 Oct 2 20:38:59.762726 env[1325]: time="2023-10-02T20:38:59.762691401Z" level=warning msg="cleaning up after shim disconnected" id=3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6 namespace=k8s.io Oct 2 20:38:59.762726 env[1325]: time="2023-10-02T20:38:59.762719502Z" level=info msg="cleaning up dead shim" Oct 2 20:38:59.770703 env[1325]: time="2023-10-02T20:38:59.770662020Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:59Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3706 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:38:59Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:38:59.770991 env[1325]: time="2023-10-02T20:38:59.770931528Z" level=error msg="copy shim log" error="read /proc/self/fd/39: file already closed" Oct 2 20:38:59.772807 env[1325]: time="2023-10-02T20:38:59.772755578Z" level=error msg="Failed to pipe stdout of container \"3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6\"" error="reading from a closed fifo" Oct 2 20:38:59.772989 env[1325]: time="2023-10-02T20:38:59.772954283Z" level=error msg="Failed to pipe stderr of container \"3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6\"" error="reading from a closed fifo" Oct 2 20:38:59.781245 env[1325]: time="2023-10-02T20:38:59.778537337Z" level=error msg="StartContainer for \"3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:38:59.781359 kubelet[2448]: E1002 20:38:59.778777 2448 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6" Oct 2 20:38:59.781359 kubelet[2448]: E1002 20:38:59.778883 2448 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:38:59.781359 kubelet[2448]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:38:59.781359 kubelet[2448]: rm /hostbin/cilium-mount Oct 2 20:38:59.781359 kubelet[2448]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wwq6k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-dxwwv_kube-system(f26e7586-d541-4b93-b2a4-840e30aa56ae): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:38:59.781359 kubelet[2448]: E1002 20:38:59.778927 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-dxwwv" podUID="f26e7586-d541-4b93-b2a4-840e30aa56ae" Oct 2 20:38:59.896545 update_engine[1311]: I1002 20:38:59.895033 1311 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 20:38:59.896545 update_engine[1311]: I1002 20:38:59.895097 1311 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 20:38:59.896545 update_engine[1311]: I1002 20:38:59.895248 1311 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 20:38:59.896545 update_engine[1311]: I1002 20:38:59.895887 1311 omaha_request_params.cc:62] Current group set to lts Oct 2 20:38:59.896545 update_engine[1311]: I1002 20:38:59.896106 1311 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 20:38:59.896545 update_engine[1311]: I1002 20:38:59.896114 1311 update_attempter.cc:638] Scheduling an action processor start. Oct 2 20:38:59.896545 update_engine[1311]: I1002 20:38:59.896136 1311 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 20:38:59.896545 update_engine[1311]: I1002 20:38:59.896174 1311 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 20:38:59.896545 update_engine[1311]: I1002 20:38:59.896251 1311 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 20:38:59.896545 update_engine[1311]: I1002 20:38:59.896258 1311 omaha_request_action.cc:269] Request: Oct 2 20:38:59.896545 update_engine[1311]: Oct 2 20:38:59.896545 update_engine[1311]: Oct 2 20:38:59.896545 update_engine[1311]: Oct 2 20:38:59.896545 update_engine[1311]: Oct 2 20:38:59.896545 update_engine[1311]: Oct 2 20:38:59.896545 update_engine[1311]: Oct 2 20:38:59.896545 update_engine[1311]: Oct 2 20:38:59.896545 update_engine[1311]: Oct 2 20:38:59.896545 update_engine[1311]: I1002 20:38:59.896266 1311 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 20:38:59.898206 update_engine[1311]: I1002 20:38:59.898089 1311 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 20:38:59.898254 locksmithd[1396]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 20:38:59.898456 update_engine[1311]: I1002 20:38:59.898294 1311 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 20:39:00.511426 kubelet[2448]: I1002 20:39:00.511169 2448 scope.go:117] "RemoveContainer" containerID="fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e" Oct 2 20:39:00.512720 env[1325]: time="2023-10-02T20:39:00.512666468Z" level=info msg="RemoveContainer for \"fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e\"" Oct 2 20:39:00.513572 kubelet[2448]: I1002 20:39:00.513545 2448 scope.go:117] "RemoveContainer" containerID="fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e" Oct 2 20:39:00.515029 env[1325]: time="2023-10-02T20:39:00.514654823Z" level=info msg="RemoveContainer for \"fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e\"" Oct 2 20:39:00.515029 env[1325]: time="2023-10-02T20:39:00.514775626Z" level=error msg="RemoveContainer for \"fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e\" failed" error="failed to set removing state for container \"fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e\": container is already in removing state" Oct 2 20:39:00.515179 kubelet[2448]: E1002 20:39:00.514934 2448 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e\": container is already in removing state" containerID="fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e" Oct 2 20:39:00.515179 kubelet[2448]: E1002 20:39:00.514969 2448 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e": container is already in removing state; Skipping pod "cilium-dxwwv_kube-system(f26e7586-d541-4b93-b2a4-840e30aa56ae)" Oct 2 20:39:00.515526 kubelet[2448]: E1002 20:39:00.515336 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-dxwwv_kube-system(f26e7586-d541-4b93-b2a4-840e30aa56ae)\"" pod="kube-system/cilium-dxwwv" podUID="f26e7586-d541-4b93-b2a4-840e30aa56ae" Oct 2 20:39:00.521153 env[1325]: time="2023-10-02T20:39:00.521117800Z" level=info msg="RemoveContainer for \"fb5b0f868bd74bfb37be12f65c2dd8f8adec96c668301a62e09417c46802605e\" returns successfully" Oct 2 20:39:00.658371 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6-rootfs.mount: Deactivated successfully. Oct 2 20:39:00.959075 update_engine[1311]: I1002 20:39:00.958396 1311 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 20:39:00.959075 update_engine[1311]: I1002 20:39:00.958694 1311 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 20:39:00.959588 update_engine[1311]: I1002 20:39:00.959177 1311 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 20:39:01.044167 update_engine[1311]: I1002 20:39:01.044116 1311 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 20:39:01.045654 update_engine[1311]: I1002 20:39:01.045615 1311 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 20:39:01.045654 update_engine[1311]: I1002 20:39:01.045641 1311 omaha_request_action.cc:619] Omaha request response: Oct 2 20:39:01.045654 update_engine[1311]: Oct 2 20:39:01.162699 update_engine[1311]: I1002 20:39:01.162652 1311 omaha_request_action.cc:409] No update. Oct 2 20:39:01.162699 update_engine[1311]: I1002 20:39:01.162693 1311 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 20:39:01.162699 update_engine[1311]: I1002 20:39:01.162699 1311 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 20:39:01.162699 update_engine[1311]: I1002 20:39:01.162704 1311 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 20:39:01.162699 update_engine[1311]: I1002 20:39:01.162708 1311 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 20:39:01.162699 update_engine[1311]: I1002 20:39:01.162712 1311 update_attempter.cc:302] Processing Done. Oct 2 20:39:01.163109 update_engine[1311]: I1002 20:39:01.162732 1311 update_attempter.cc:338] No update. Oct 2 20:39:01.163109 update_engine[1311]: I1002 20:39:01.162746 1311 update_check_scheduler.cc:74] Next update check in 44m27s Oct 2 20:39:01.163206 locksmithd[1396]: LastCheckedTime=1696279141 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 20:39:01.867193 kubelet[2448]: E1002 20:39:01.867150 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:02.867722 kubelet[2448]: W1002 20:39:02.867670 2448 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podf26e7586_d541_4b93_b2a4_840e30aa56ae.slice/cri-containerd-3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6.scope WatchSource:0}: task 3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6 not found: not found Oct 2 20:39:06.868703 kubelet[2448]: E1002 20:39:06.868659 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:11.628517 kubelet[2448]: E1002 20:39:11.628457 2448 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-dxwwv_kube-system(f26e7586-d541-4b93-b2a4-840e30aa56ae)\"" pod="kube-system/cilium-dxwwv" podUID="f26e7586-d541-4b93-b2a4-840e30aa56ae" Oct 2 20:39:11.869476 kubelet[2448]: E1002 20:39:11.869444 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:13.189000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:13.193980 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:39:13.194117 kernel: audit: type=1400 audit(1696279153.189:1383): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:13.189000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:13.227277 kernel: audit: type=1400 audit(1696279153.189:1382): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:13.227391 kernel: audit: type=1300 audit(1696279153.189:1383): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d79e60 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:39:13.189000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d79e60 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:39:13.189000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:13.268408 kernel: audit: type=1327 audit(1696279153.189:1383): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:13.268561 kernel: audit: type=1300 audit(1696279153.189:1382): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002048390 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:39:13.189000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002048390 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:39:13.189000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:13.307696 kernel: audit: type=1327 audit(1696279153.189:1382): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:13.307838 kernel: audit: type=1400 audit(1696279153.232:1384): avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:13.232000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:13.232000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00d7736e0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:39:13.232000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:13.360943 kernel: audit: type=1300 audit(1696279153.232:1384): arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00d7736e0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:39:13.361095 kernel: audit: type=1327 audit(1696279153.232:1384): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:13.361123 kernel: audit: type=1400 audit(1696279153.232:1385): avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:13.232000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:13.232000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00cdbfd80 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:39:13.232000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:13.241000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:13.241000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00da66ed0 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:39:13.241000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:13.322000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:13.322000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00d792f80 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:39:13.322000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:13.322000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=4863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:13.322000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00da66f30 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:39:13.322000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:13.324000 audit[2274]: AVC avc: denied { watch } for pid=2274 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:13.324000 audit[2274]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00da67050 a2=fc6 a3=0 items=0 ppid=2135 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c112,c942 key=(null) Oct 2 20:39:13.324000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:16.871112 kubelet[2448]: E1002 20:39:16.871071 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:20.865583 env[1325]: time="2023-10-02T20:39:20.865533100Z" level=info msg="StopPodSandbox for \"c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508\"" Oct 2 20:39:20.866198 env[1325]: time="2023-10-02T20:39:20.866161915Z" level=info msg="Container to stop \"3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:39:20.868381 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508-shm.mount: Deactivated successfully. Oct 2 20:39:20.881632 systemd[1]: cri-containerd-c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508.scope: Deactivated successfully. Oct 2 20:39:20.880000 audit: BPF prog-id=126 op=UNLOAD Oct 2 20:39:20.887517 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:39:20.887592 kernel: audit: type=1334 audit(1696279160.880:1390): prog-id=126 op=UNLOAD Oct 2 20:39:20.894000 audit: BPF prog-id=129 op=UNLOAD Oct 2 20:39:20.905085 kernel: audit: type=1334 audit(1696279160.894:1391): prog-id=129 op=UNLOAD Oct 2 20:39:20.920083 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508-rootfs.mount: Deactivated successfully. Oct 2 20:39:20.988420 env[1325]: time="2023-10-02T20:39:20.988361383Z" level=info msg="shim disconnected" id=c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508 Oct 2 20:39:20.988420 env[1325]: time="2023-10-02T20:39:20.988420685Z" level=warning msg="cleaning up after shim disconnected" id=c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508 namespace=k8s.io Oct 2 20:39:20.988736 env[1325]: time="2023-10-02T20:39:20.988432785Z" level=info msg="cleaning up dead shim" Oct 2 20:39:21.003864 env[1325]: time="2023-10-02T20:39:21.003811971Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:39:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3740 runtime=io.containerd.runc.v2\n" Oct 2 20:39:21.004191 env[1325]: time="2023-10-02T20:39:21.004159179Z" level=info msg="TearDown network for sandbox \"c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508\" successfully" Oct 2 20:39:21.004279 env[1325]: time="2023-10-02T20:39:21.004186980Z" level=info msg="StopPodSandbox for \"c6a7535ac179e2941a1e709d35d15ea0237c6301cdb8acf2dc49135fa200c508\" returns successfully" Oct 2 20:39:21.142113 sshd[3514]: pam_unix(sshd:session): session closed for user core Oct 2 20:39:21.143000 audit[3514]: USER_END pid=3514 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:39:21.145801 systemd[1]: sshd@29-10.200.8.16:22-10.200.12.6:37972.service: Deactivated successfully. Oct 2 20:39:21.146547 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 20:39:21.147848 systemd-logind[1309]: Session 32 logged out. Waiting for processes to exit. Oct 2 20:39:21.148981 systemd-logind[1309]: Removed session 32. Oct 2 20:39:21.166060 kernel: audit: type=1106 audit(1696279161.143:1392): pid=3514 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:39:21.166181 kernel: audit: type=1104 audit(1696279161.143:1393): pid=3514 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:39:21.143000 audit[3514]: CRED_DISP pid=3514 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:39:21.143000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.16:22-10.200.12.6:37972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:39:21.181018 kernel: audit: type=1131 audit(1696279161.143:1394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.16:22-10.200.12.6:37972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:39:21.193691 kubelet[2448]: I1002 20:39:21.192339 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-cilium-run\") pod \"f26e7586-d541-4b93-b2a4-840e30aa56ae\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " Oct 2 20:39:21.193691 kubelet[2448]: I1002 20:39:21.192419 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "f26e7586-d541-4b93-b2a4-840e30aa56ae" (UID: "f26e7586-d541-4b93-b2a4-840e30aa56ae"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:21.193691 kubelet[2448]: I1002 20:39:21.192467 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "f26e7586-d541-4b93-b2a4-840e30aa56ae" (UID: "f26e7586-d541-4b93-b2a4-840e30aa56ae"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:21.193691 kubelet[2448]: I1002 20:39:21.192449 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-host-proc-sys-kernel\") pod \"f26e7586-d541-4b93-b2a4-840e30aa56ae\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " Oct 2 20:39:21.193691 kubelet[2448]: I1002 20:39:21.192514 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/f26e7586-d541-4b93-b2a4-840e30aa56ae-hubble-tls\") pod \"f26e7586-d541-4b93-b2a4-840e30aa56ae\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " Oct 2 20:39:21.193691 kubelet[2448]: I1002 20:39:21.192814 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-hostproc\") pod \"f26e7586-d541-4b93-b2a4-840e30aa56ae\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " Oct 2 20:39:21.193691 kubelet[2448]: I1002 20:39:21.192839 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-bpf-maps\") pod \"f26e7586-d541-4b93-b2a4-840e30aa56ae\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " Oct 2 20:39:21.193691 kubelet[2448]: I1002 20:39:21.192858 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/f26e7586-d541-4b93-b2a4-840e30aa56ae-cilium-config-path\") pod \"f26e7586-d541-4b93-b2a4-840e30aa56ae\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " Oct 2 20:39:21.193691 kubelet[2448]: I1002 20:39:21.192886 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-host-proc-sys-net\") pod \"f26e7586-d541-4b93-b2a4-840e30aa56ae\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " Oct 2 20:39:21.193691 kubelet[2448]: I1002 20:39:21.192906 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-xtables-lock\") pod \"f26e7586-d541-4b93-b2a4-840e30aa56ae\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " Oct 2 20:39:21.193691 kubelet[2448]: I1002 20:39:21.192924 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/f26e7586-d541-4b93-b2a4-840e30aa56ae-cilium-ipsec-secrets\") pod \"f26e7586-d541-4b93-b2a4-840e30aa56ae\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " Oct 2 20:39:21.193691 kubelet[2448]: I1002 20:39:21.192942 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-wwq6k\" (UniqueName: \"kubernetes.io/projected/f26e7586-d541-4b93-b2a4-840e30aa56ae-kube-api-access-wwq6k\") pod \"f26e7586-d541-4b93-b2a4-840e30aa56ae\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " Oct 2 20:39:21.193691 kubelet[2448]: I1002 20:39:21.192964 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-etc-cni-netd\") pod \"f26e7586-d541-4b93-b2a4-840e30aa56ae\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " Oct 2 20:39:21.193691 kubelet[2448]: I1002 20:39:21.192980 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-cni-path\") pod \"f26e7586-d541-4b93-b2a4-840e30aa56ae\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " Oct 2 20:39:21.193691 kubelet[2448]: I1002 20:39:21.193004 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-lib-modules\") pod \"f26e7586-d541-4b93-b2a4-840e30aa56ae\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " Oct 2 20:39:21.193691 kubelet[2448]: I1002 20:39:21.193021 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/f26e7586-d541-4b93-b2a4-840e30aa56ae-clustermesh-secrets\") pod \"f26e7586-d541-4b93-b2a4-840e30aa56ae\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " Oct 2 20:39:21.194421 kubelet[2448]: I1002 20:39:21.193036 2448 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-cilium-cgroup\") pod \"f26e7586-d541-4b93-b2a4-840e30aa56ae\" (UID: \"f26e7586-d541-4b93-b2a4-840e30aa56ae\") " Oct 2 20:39:21.194421 kubelet[2448]: I1002 20:39:21.193066 2448 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-cilium-run\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:39:21.194421 kubelet[2448]: I1002 20:39:21.193086 2448 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:39:21.194421 kubelet[2448]: I1002 20:39:21.193108 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "f26e7586-d541-4b93-b2a4-840e30aa56ae" (UID: "f26e7586-d541-4b93-b2a4-840e30aa56ae"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:21.194421 kubelet[2448]: I1002 20:39:21.193125 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-hostproc" (OuterVolumeSpecName: "hostproc") pod "f26e7586-d541-4b93-b2a4-840e30aa56ae" (UID: "f26e7586-d541-4b93-b2a4-840e30aa56ae"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:21.194421 kubelet[2448]: I1002 20:39:21.193137 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "f26e7586-d541-4b93-b2a4-840e30aa56ae" (UID: "f26e7586-d541-4b93-b2a4-840e30aa56ae"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:21.195520 kubelet[2448]: I1002 20:39:21.195499 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "f26e7586-d541-4b93-b2a4-840e30aa56ae" (UID: "f26e7586-d541-4b93-b2a4-840e30aa56ae"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:21.195635 kubelet[2448]: I1002 20:39:21.195624 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "f26e7586-d541-4b93-b2a4-840e30aa56ae" (UID: "f26e7586-d541-4b93-b2a4-840e30aa56ae"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:21.196038 kubelet[2448]: I1002 20:39:21.196021 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "f26e7586-d541-4b93-b2a4-840e30aa56ae" (UID: "f26e7586-d541-4b93-b2a4-840e30aa56ae"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:21.196131 kubelet[2448]: I1002 20:39:21.196122 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-cni-path" (OuterVolumeSpecName: "cni-path") pod "f26e7586-d541-4b93-b2a4-840e30aa56ae" (UID: "f26e7586-d541-4b93-b2a4-840e30aa56ae"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:21.196204 kubelet[2448]: I1002 20:39:21.196194 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "f26e7586-d541-4b93-b2a4-840e30aa56ae" (UID: "f26e7586-d541-4b93-b2a4-840e30aa56ae"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:21.202667 systemd[1]: var-lib-kubelet-pods-f26e7586\x2dd541\x2d4b93\x2db2a4\x2d840e30aa56ae-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:39:21.205202 kubelet[2448]: I1002 20:39:21.205162 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/f26e7586-d541-4b93-b2a4-840e30aa56ae-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "f26e7586-d541-4b93-b2a4-840e30aa56ae" (UID: "f26e7586-d541-4b93-b2a4-840e30aa56ae"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:39:21.209827 systemd[1]: var-lib-kubelet-pods-f26e7586\x2dd541\x2d4b93\x2db2a4\x2d840e30aa56ae-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dwwq6k.mount: Deactivated successfully. Oct 2 20:39:21.212150 systemd[1]: var-lib-kubelet-pods-f26e7586\x2dd541\x2d4b93\x2db2a4\x2d840e30aa56ae-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:39:21.213803 kubelet[2448]: I1002 20:39:21.212960 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/f26e7586-d541-4b93-b2a4-840e30aa56ae-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "f26e7586-d541-4b93-b2a4-840e30aa56ae" (UID: "f26e7586-d541-4b93-b2a4-840e30aa56ae"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:39:21.214444 kubelet[2448]: I1002 20:39:21.214414 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/f26e7586-d541-4b93-b2a4-840e30aa56ae-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "f26e7586-d541-4b93-b2a4-840e30aa56ae" (UID: "f26e7586-d541-4b93-b2a4-840e30aa56ae"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:39:21.216485 kubelet[2448]: I1002 20:39:21.216453 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/f26e7586-d541-4b93-b2a4-840e30aa56ae-kube-api-access-wwq6k" (OuterVolumeSpecName: "kube-api-access-wwq6k") pod "f26e7586-d541-4b93-b2a4-840e30aa56ae" (UID: "f26e7586-d541-4b93-b2a4-840e30aa56ae"). InnerVolumeSpecName "kube-api-access-wwq6k". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:39:21.216910 kubelet[2448]: I1002 20:39:21.216885 2448 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/f26e7586-d541-4b93-b2a4-840e30aa56ae-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "f26e7586-d541-4b93-b2a4-840e30aa56ae" (UID: "f26e7586-d541-4b93-b2a4-840e30aa56ae"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:39:21.294240 kubelet[2448]: I1002 20:39:21.294183 2448 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/f26e7586-d541-4b93-b2a4-840e30aa56ae-hubble-tls\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:39:21.294485 kubelet[2448]: I1002 20:39:21.294467 2448 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-hostproc\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:39:21.294597 kubelet[2448]: I1002 20:39:21.294576 2448 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-bpf-maps\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:39:21.294695 kubelet[2448]: I1002 20:39:21.294605 2448 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/f26e7586-d541-4b93-b2a4-840e30aa56ae-cilium-config-path\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:39:21.294695 kubelet[2448]: I1002 20:39:21.294624 2448 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-host-proc-sys-net\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:39:21.294695 kubelet[2448]: I1002 20:39:21.294644 2448 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-xtables-lock\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:39:21.294695 kubelet[2448]: I1002 20:39:21.294666 2448 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/f26e7586-d541-4b93-b2a4-840e30aa56ae-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:39:21.294695 kubelet[2448]: I1002 20:39:21.294689 2448 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-wwq6k\" (UniqueName: \"kubernetes.io/projected/f26e7586-d541-4b93-b2a4-840e30aa56ae-kube-api-access-wwq6k\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:39:21.294923 kubelet[2448]: I1002 20:39:21.294709 2448 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-etc-cni-netd\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:39:21.294923 kubelet[2448]: I1002 20:39:21.294728 2448 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-cni-path\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:39:21.294923 kubelet[2448]: I1002 20:39:21.294746 2448 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-lib-modules\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:39:21.294923 kubelet[2448]: I1002 20:39:21.294765 2448 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/f26e7586-d541-4b93-b2a4-840e30aa56ae-clustermesh-secrets\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:39:21.294923 kubelet[2448]: I1002 20:39:21.294786 2448 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/f26e7586-d541-4b93-b2a4-840e30aa56ae-cilium-cgroup\") on node \"ci-3510.3.0-a-2276519d4a\" DevicePath \"\"" Oct 2 20:39:21.553430 kubelet[2448]: I1002 20:39:21.553399 2448 scope.go:117] "RemoveContainer" containerID="3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6" Oct 2 20:39:21.554864 env[1325]: time="2023-10-02T20:39:21.554822846Z" level=info msg="RemoveContainer for \"3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6\"" Oct 2 20:39:21.559442 systemd[1]: Removed slice kubepods-burstable-podf26e7586_d541_4b93_b2a4_840e30aa56ae.slice. Oct 2 20:39:21.563696 env[1325]: time="2023-10-02T20:39:21.563660067Z" level=info msg="RemoveContainer for \"3ebe9c7ec45c62bf2e0306da260e142aa99cef9618cac1f50d00c142bcac24a6\" returns successfully" Oct 2 20:39:21.868150 systemd[1]: var-lib-kubelet-pods-f26e7586\x2dd541\x2d4b93\x2db2a4\x2d840e30aa56ae-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:39:21.872637 kubelet[2448]: E1002 20:39:21.872610 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:22.630389 kubelet[2448]: I1002 20:39:22.630351 2448 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="f26e7586-d541-4b93-b2a4-840e30aa56ae" path="/var/lib/kubelet/pods/f26e7586-d541-4b93-b2a4-840e30aa56ae/volumes" Oct 2 20:39:26.873948 kubelet[2448]: E1002 20:39:26.873900 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:28.090000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:28.090000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0016a1e00 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:39:28.129555 kernel: audit: type=1400 audit(1696279168.090:1395): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:28.129710 kernel: audit: type=1300 audit(1696279168.090:1395): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0016a1e00 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:39:28.129740 kernel: audit: type=1327 audit(1696279168.090:1395): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:28.090000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:28.112000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:28.163234 kernel: audit: type=1400 audit(1696279168.112:1396): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:28.112000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00149dc60 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:39:28.164018 kernel: audit: type=1300 audit(1696279168.112:1396): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00149dc60 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:39:28.185055 kernel: audit: type=1327 audit(1696279168.112:1396): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:28.112000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:28.112000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:28.218572 kernel: audit: type=1400 audit(1696279168.112:1397): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:28.218700 kernel: audit: type=1300 audit(1696279168.112:1397): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00149dc80 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:39:28.112000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00149dc80 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:39:28.112000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:28.255756 kernel: audit: type=1327 audit(1696279168.112:1397): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:28.255884 kernel: audit: type=1400 audit(1696279168.112:1398): avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:28.112000 audit[2323]: AVC avc: denied { watch } for pid=2323 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:28.112000 audit[2323]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00149dca0 a2=fc6 a3=0 items=0 ppid=2182 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:39:28.112000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:31.874950 kubelet[2448]: E1002 20:39:31.874915 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:35.053152 systemd[1]: cri-containerd-85c197f5af9cafdc75b9f3a177f3b433c92db778a5aa081940a9917d0f3a451c.scope: Deactivated successfully. Oct 2 20:39:35.053527 systemd[1]: cri-containerd-85c197f5af9cafdc75b9f3a177f3b433c92db778a5aa081940a9917d0f3a451c.scope: Consumed 5.265s CPU time. Oct 2 20:39:35.064079 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:39:35.064202 kernel: audit: type=1334 audit(1696279175.056:1399): prog-id=81 op=UNLOAD Oct 2 20:39:35.056000 audit: BPF prog-id=81 op=UNLOAD Oct 2 20:39:35.056000 audit: BPF prog-id=90 op=UNLOAD Oct 2 20:39:35.073697 kernel: audit: type=1334 audit(1696279175.056:1400): prog-id=90 op=UNLOAD Oct 2 20:39:35.082425 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-85c197f5af9cafdc75b9f3a177f3b433c92db778a5aa081940a9917d0f3a451c-rootfs.mount: Deactivated successfully. Oct 2 20:39:35.168982 env[1325]: time="2023-10-02T20:39:35.168632068Z" level=info msg="shim disconnected" id=85c197f5af9cafdc75b9f3a177f3b433c92db778a5aa081940a9917d0f3a451c Oct 2 20:39:35.169530 env[1325]: time="2023-10-02T20:39:35.168981076Z" level=warning msg="cleaning up after shim disconnected" id=85c197f5af9cafdc75b9f3a177f3b433c92db778a5aa081940a9917d0f3a451c namespace=k8s.io Oct 2 20:39:35.169530 env[1325]: time="2023-10-02T20:39:35.169021777Z" level=info msg="cleaning up dead shim" Oct 2 20:39:35.177471 env[1325]: time="2023-10-02T20:39:35.177424675Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:39:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3772 runtime=io.containerd.runc.v2\n" Oct 2 20:39:35.581599 kubelet[2448]: I1002 20:39:35.581563 2448 scope.go:117] "RemoveContainer" containerID="85c197f5af9cafdc75b9f3a177f3b433c92db778a5aa081940a9917d0f3a451c" Oct 2 20:39:35.584061 env[1325]: time="2023-10-02T20:39:35.583986676Z" level=info msg="CreateContainer within sandbox \"3c4b1539958e3decf4fd68cecd9c1aa8841e15c91ac122ad97722e2ca2df5187\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 20:39:35.618005 env[1325]: time="2023-10-02T20:39:35.617931477Z" level=info msg="CreateContainer within sandbox \"3c4b1539958e3decf4fd68cecd9c1aa8841e15c91ac122ad97722e2ca2df5187\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"2c14558c9b8913aeb93342201a4a3010c421a751b860d1aa206477481da874fe\"" Oct 2 20:39:35.618642 env[1325]: time="2023-10-02T20:39:35.618610293Z" level=info msg="StartContainer for \"2c14558c9b8913aeb93342201a4a3010c421a751b860d1aa206477481da874fe\"" Oct 2 20:39:35.643440 systemd[1]: Started cri-containerd-2c14558c9b8913aeb93342201a4a3010c421a751b860d1aa206477481da874fe.scope. Oct 2 20:39:35.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675017 kernel: audit: type=1400 audit(1696279175.658:1401): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.707763 kernel: audit: type=1400 audit(1696279175.658:1402): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.707899 kernel: audit: type=1400 audit(1696279175.658:1403): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.736362 kernel: audit: type=1400 audit(1696279175.658:1404): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.736489 kernel: audit: type=1400 audit(1696279175.658:1405): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.746855 env[1325]: time="2023-10-02T20:39:35.746808221Z" level=info msg="StartContainer for \"2c14558c9b8913aeb93342201a4a3010c421a751b860d1aa206477481da874fe\" returns successfully" Oct 2 20:39:35.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.766385 kernel: audit: type=1400 audit(1696279175.658:1406): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.766520 kernel: audit: type=1400 audit(1696279175.658:1407): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.784032 kernel: audit: type=1400 audit(1696279175.658:1408): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.674000 audit: BPF prog-id=130 op=LOAD Oct 2 20:39:35.674000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.674000 audit[3793]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2182 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:39:35.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263313435353863396238393133616562393333343232303161346133 Oct 2 20:39:35.674000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.674000 audit[3793]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2182 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:39:35.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263313435353863396238393133616562393333343232303161346133 Oct 2 20:39:35.674000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.674000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.674000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.674000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.674000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.674000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.674000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.674000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.674000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.674000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.674000 audit: BPF prog-id=131 op=LOAD Oct 2 20:39:35.674000 audit[3793]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000218330 items=0 ppid=2182 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:39:35.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263313435353863396238393133616562393333343232303161346133 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit: BPF prog-id=132 op=LOAD Oct 2 20:39:35.675000 audit[3793]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000218378 items=0 ppid=2182 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:39:35.675000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263313435353863396238393133616562393333343232303161346133 Oct 2 20:39:35.675000 audit: BPF prog-id=132 op=UNLOAD Oct 2 20:39:35.675000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:35.675000 audit: BPF prog-id=133 op=LOAD Oct 2 20:39:35.675000 audit[3793]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000218788 items=0 ppid=2182 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:39:35.675000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263313435353863396238393133616562393333343232303161346133 Oct 2 20:39:36.084448 systemd[1]: run-containerd-runc-k8s.io-2c14558c9b8913aeb93342201a4a3010c421a751b860d1aa206477481da874fe-runc.BAH0MD.mount: Deactivated successfully. Oct 2 20:39:36.419000 audit[3804]: AVC avc: denied { watch } for pid=3804 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4867 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:36.419000 audit[3804]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0008c8000 a2=fc6 a3=0 items=0 ppid=2182 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:39:36.419000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:36.422000 audit[3804]: AVC avc: denied { watch } for pid=3804 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=4852 scontext=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:36.422000 audit[3804]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00082b380 a2=fc6 a3=0 items=0 ppid=2182 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c376,c624 key=(null) Oct 2 20:39:36.422000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:36.875796 kubelet[2448]: E1002 20:39:36.875763 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:37.240500 kubelet[2448]: E1002 20:39:37.240074 2448 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"kube-apiserver-ci-3510.3.0-a-2276519d4a.178a64ea3955ffc0", GenerateName:"", Namespace:"kube-system", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Pod", Namespace:"kube-system", Name:"kube-apiserver-ci-3510.3.0-a-2276519d4a", UID:"f21741c406d8bb6a08bde4a515d4a7b8", APIVersion:"v1", ResourceVersion:"", FieldPath:"spec.containers{kube-apiserver}"}, Reason:"Unhealthy", Message:"Liveness probe failed: HTTP probe failed with statuscode: 500", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-2276519d4a"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 39, 26, 805475264, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 39, 26, 805475264, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510.3.0-a-2276519d4a"}': 'rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.16:58470->10.200.8.13:2379: read: connection timed out' (will not retry!) Oct 2 20:39:39.857252 systemd[1]: cri-containerd-8de9233d97b9838e3eac00d0c593208dca3ef3bb94affed52ada9803d08001aa.scope: Deactivated successfully. Oct 2 20:39:39.857615 systemd[1]: cri-containerd-8de9233d97b9838e3eac00d0c593208dca3ef3bb94affed52ada9803d08001aa.scope: Consumed 2.469s CPU time. Oct 2 20:39:39.861000 audit: BPF prog-id=85 op=UNLOAD Oct 2 20:39:39.861000 audit: BPF prog-id=86 op=UNLOAD Oct 2 20:39:39.878749 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8de9233d97b9838e3eac00d0c593208dca3ef3bb94affed52ada9803d08001aa-rootfs.mount: Deactivated successfully. Oct 2 20:39:39.955226 env[1325]: time="2023-10-02T20:39:39.955169488Z" level=info msg="shim disconnected" id=8de9233d97b9838e3eac00d0c593208dca3ef3bb94affed52ada9803d08001aa Oct 2 20:39:39.955226 env[1325]: time="2023-10-02T20:39:39.955229189Z" level=warning msg="cleaning up after shim disconnected" id=8de9233d97b9838e3eac00d0c593208dca3ef3bb94affed52ada9803d08001aa namespace=k8s.io Oct 2 20:39:39.955817 env[1325]: time="2023-10-02T20:39:39.955240589Z" level=info msg="cleaning up dead shim" Oct 2 20:39:39.963404 env[1325]: time="2023-10-02T20:39:39.963363778Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:39:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3834 runtime=io.containerd.runc.v2\n" Oct 2 20:39:40.312200 kubelet[2448]: E1002 20:39:40.312159 2448 controller.go:193] "Failed to update lease" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.16:58662->10.200.8.13:2379: read: connection timed out" Oct 2 20:39:40.593710 kubelet[2448]: I1002 20:39:40.593467 2448 scope.go:117] "RemoveContainer" containerID="8de9233d97b9838e3eac00d0c593208dca3ef3bb94affed52ada9803d08001aa" Oct 2 20:39:40.595506 env[1325]: time="2023-10-02T20:39:40.595462418Z" level=info msg="CreateContainer within sandbox \"0c2901b34fb528c5bfdd1fef92d775f6e101516f1350ce883c717343fb9725b1\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 20:39:40.618889 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2528057480.mount: Deactivated successfully. Oct 2 20:39:40.625361 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount906418340.mount: Deactivated successfully. Oct 2 20:39:40.646738 env[1325]: time="2023-10-02T20:39:40.646685104Z" level=info msg="CreateContainer within sandbox \"0c2901b34fb528c5bfdd1fef92d775f6e101516f1350ce883c717343fb9725b1\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"2e5f46f8aa0b7b41f222ad6d04271393ff5b24c8415e25c74fd7955a38b8765f\"" Oct 2 20:39:40.647266 env[1325]: time="2023-10-02T20:39:40.647236617Z" level=info msg="StartContainer for \"2e5f46f8aa0b7b41f222ad6d04271393ff5b24c8415e25c74fd7955a38b8765f\"" Oct 2 20:39:40.664622 systemd[1]: Started cri-containerd-2e5f46f8aa0b7b41f222ad6d04271393ff5b24c8415e25c74fd7955a38b8765f.scope. Oct 2 20:39:40.698201 kernel: kauditd_printk_skb: 57 callbacks suppressed Oct 2 20:39:40.698364 kernel: audit: type=1400 audit(1696279180.678:1423): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.711817 kernel: audit: type=1400 audit(1696279180.678:1424): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.738896 kernel: audit: type=1400 audit(1696279180.678:1425): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.739029 kernel: audit: type=1400 audit(1696279180.678:1426): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.769176 kernel: audit: type=1400 audit(1696279180.678:1427): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.769288 kernel: audit: type=1400 audit(1696279180.678:1428): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.769315 kernel: audit: type=1400 audit(1696279180.678:1429): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.797012 kernel: audit: type=1400 audit(1696279180.678:1430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.797122 kernel: audit: type=1400 audit(1696279180.678:1431): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.809772 kernel: audit: type=1400 audit(1696279180.678:1432): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.678000 audit: BPF prog-id=134 op=LOAD Oct 2 20:39:40.679000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.679000 audit[3854]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2168 pid=3854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:39:40.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265356634366638616130623762343166323232616436643034323731 Oct 2 20:39:40.679000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.679000 audit[3854]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2168 pid=3854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:39:40.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265356634366638616130623762343166323232616436643034323731 Oct 2 20:39:40.679000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.679000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.679000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.679000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.679000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.679000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.679000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.679000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.679000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.679000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.679000 audit: BPF prog-id=135 op=LOAD Oct 2 20:39:40.679000 audit[3854]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000302e20 items=0 ppid=2168 pid=3854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:39:40.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265356634366638616130623762343166323232616436643034323731 Oct 2 20:39:40.711000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.711000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.711000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.711000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.711000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.711000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.711000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.711000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.711000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.711000 audit: BPF prog-id=136 op=LOAD Oct 2 20:39:40.711000 audit[3854]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000287448 items=0 ppid=2168 pid=3854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:39:40.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265356634366638616130623762343166323232616436643034323731 Oct 2 20:39:40.738000 audit: BPF prog-id=136 op=UNLOAD Oct 2 20:39:40.738000 audit: BPF prog-id=135 op=UNLOAD Oct 2 20:39:40.738000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.738000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.738000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.738000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.738000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.738000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.738000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.738000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.738000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.738000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:39:40.738000 audit: BPF prog-id=137 op=LOAD Oct 2 20:39:40.738000 audit[3854]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000287858 items=0 ppid=2168 pid=3854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:39:40.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265356634366638616130623762343166323232616436643034323731 Oct 2 20:39:40.838189 env[1325]: time="2023-10-02T20:39:40.838142837Z" level=info msg="StartContainer for \"2e5f46f8aa0b7b41f222ad6d04271393ff5b24c8415e25c74fd7955a38b8765f\" returns successfully" Oct 2 20:39:41.876409 kubelet[2448]: E1002 20:39:41.876381 2448 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:45.304095 kubelet[2448]: I1002 20:39:45.304051 2448 status_manager.go:853] "Failed to get status for pod" podUID="f21741c406d8bb6a08bde4a515d4a7b8" pod="kube-system/kube-apiserver-ci-3510.3.0-a-2276519d4a" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.16:58588->10.200.8.13:2379: read: connection timed out"