Oct 2 19:22:56.078731 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:22:56.078769 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:22:56.078791 kernel: BIOS-provided physical RAM map: Oct 2 19:22:56.078804 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 19:22:56.078817 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 19:22:56.078829 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 19:22:56.078844 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007ffdcfff] usable Oct 2 19:22:56.082879 kernel: BIOS-e820: [mem 0x000000007ffdd000-0x000000007fffffff] reserved Oct 2 19:22:56.082891 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Oct 2 19:22:56.082898 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 19:22:56.082905 kernel: NX (Execute Disable) protection: active Oct 2 19:22:56.082912 kernel: SMBIOS 2.8 present. Oct 2 19:22:56.082918 kernel: DMI: OpenStack Foundation OpenStack Nova, BIOS 1.15.0-1 04/01/2014 Oct 2 19:22:56.082925 kernel: Hypervisor detected: KVM Oct 2 19:22:56.082933 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:22:56.082942 kernel: kvm-clock: cpu 0, msr 20f8a001, primary cpu clock Oct 2 19:22:56.082949 kernel: kvm-clock: using sched offset of 6020629578 cycles Oct 2 19:22:56.082957 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:22:56.082964 kernel: tsc: Detected 1996.249 MHz processor Oct 2 19:22:56.082972 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:22:56.082980 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:22:56.082987 kernel: last_pfn = 0x7ffdd max_arch_pfn = 0x400000000 Oct 2 19:22:56.082995 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:22:56.083004 kernel: ACPI: Early table checksum verification disabled Oct 2 19:22:56.083011 kernel: ACPI: RSDP 0x00000000000F5930 000014 (v00 BOCHS ) Oct 2 19:22:56.083019 kernel: ACPI: RSDT 0x000000007FFE1848 000030 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:22:56.083026 kernel: ACPI: FACP 0x000000007FFE172C 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:22:56.083034 kernel: ACPI: DSDT 0x000000007FFE0040 0016EC (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:22:56.083041 kernel: ACPI: FACS 0x000000007FFE0000 000040 Oct 2 19:22:56.083048 kernel: ACPI: APIC 0x000000007FFE17A0 000080 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:22:56.083055 kernel: ACPI: WAET 0x000000007FFE1820 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:22:56.083063 kernel: ACPI: Reserving FACP table memory at [mem 0x7ffe172c-0x7ffe179f] Oct 2 19:22:56.083072 kernel: ACPI: Reserving DSDT table memory at [mem 0x7ffe0040-0x7ffe172b] Oct 2 19:22:56.083079 kernel: ACPI: Reserving FACS table memory at [mem 0x7ffe0000-0x7ffe003f] Oct 2 19:22:56.083086 kernel: ACPI: Reserving APIC table memory at [mem 0x7ffe17a0-0x7ffe181f] Oct 2 19:22:56.083093 kernel: ACPI: Reserving WAET table memory at [mem 0x7ffe1820-0x7ffe1847] Oct 2 19:22:56.083100 kernel: No NUMA configuration found Oct 2 19:22:56.083107 kernel: Faking a node at [mem 0x0000000000000000-0x000000007ffdcfff] Oct 2 19:22:56.083115 kernel: NODE_DATA(0) allocated [mem 0x7ffd7000-0x7ffdcfff] Oct 2 19:22:56.083122 kernel: Zone ranges: Oct 2 19:22:56.083134 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:22:56.083142 kernel: DMA32 [mem 0x0000000001000000-0x000000007ffdcfff] Oct 2 19:22:56.083149 kernel: Normal empty Oct 2 19:22:56.083157 kernel: Movable zone start for each node Oct 2 19:22:56.083164 kernel: Early memory node ranges Oct 2 19:22:56.083172 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 19:22:56.083181 kernel: node 0: [mem 0x0000000000100000-0x000000007ffdcfff] Oct 2 19:22:56.083189 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007ffdcfff] Oct 2 19:22:56.083196 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:22:56.083203 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 19:22:56.083211 kernel: On node 0, zone DMA32: 35 pages in unavailable ranges Oct 2 19:22:56.083218 kernel: ACPI: PM-Timer IO Port: 0x608 Oct 2 19:22:56.083226 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:22:56.083233 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:22:56.083241 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Oct 2 19:22:56.083250 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:22:56.083258 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:22:56.083266 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:22:56.083273 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:22:56.083281 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:22:56.083288 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 19:22:56.083296 kernel: [mem 0x80000000-0xfeffbfff] available for PCI devices Oct 2 19:22:56.083303 kernel: Booting paravirtualized kernel on KVM Oct 2 19:22:56.083311 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:22:56.083319 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 19:22:56.083329 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 19:22:56.083336 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 19:22:56.083344 kernel: pcpu-alloc: [0] 0 1 Oct 2 19:22:56.083351 kernel: kvm-guest: stealtime: cpu 0, msr 7dc1c0c0 Oct 2 19:22:56.083359 kernel: kvm-guest: PV spinlocks disabled, no host support Oct 2 19:22:56.083366 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515805 Oct 2 19:22:56.083374 kernel: Policy zone: DMA32 Oct 2 19:22:56.083383 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:22:56.083393 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:22:56.083401 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:22:56.083408 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 19:22:56.083416 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:22:56.083424 kernel: Memory: 1975340K/2096620K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 121020K reserved, 0K cma-reserved) Oct 2 19:22:56.083431 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:22:56.083439 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:22:56.083446 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:22:56.083456 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:22:56.083465 kernel: rcu: RCU event tracing is enabled. Oct 2 19:22:56.083472 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:22:56.083480 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:22:56.083488 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:22:56.083495 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:22:56.083503 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:22:56.083510 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Oct 2 19:22:56.083518 kernel: Console: colour VGA+ 80x25 Oct 2 19:22:56.083528 kernel: printk: console [tty0] enabled Oct 2 19:22:56.083535 kernel: printk: console [ttyS0] enabled Oct 2 19:22:56.083542 kernel: ACPI: Core revision 20210730 Oct 2 19:22:56.083550 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:22:56.083557 kernel: x2apic enabled Oct 2 19:22:56.083565 kernel: Switched APIC routing to physical x2apic. Oct 2 19:22:56.083572 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Oct 2 19:22:56.083580 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Oct 2 19:22:56.083587 kernel: Calibrating delay loop (skipped) preset value.. 3992.49 BogoMIPS (lpj=1996249) Oct 2 19:22:56.083595 kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Oct 2 19:22:56.083605 kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 Oct 2 19:22:56.083613 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:22:56.083620 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:22:56.083628 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:22:56.083635 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:22:56.083643 kernel: Speculative Store Bypass: Vulnerable Oct 2 19:22:56.083650 kernel: x86/fpu: x87 FPU will use FXSAVE Oct 2 19:22:56.083658 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:22:56.083665 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:22:56.083674 kernel: LSM: Security Framework initializing Oct 2 19:22:56.083682 kernel: SELinux: Initializing. Oct 2 19:22:56.083689 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 19:22:56.083697 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 19:22:56.083705 kernel: smpboot: CPU0: AMD Intel Core i7 9xx (Nehalem Class Core i7) (family: 0x6, model: 0x1a, stepping: 0x3) Oct 2 19:22:56.083712 kernel: Performance Events: AMD PMU driver. Oct 2 19:22:56.083719 kernel: ... version: 0 Oct 2 19:22:56.083727 kernel: ... bit width: 48 Oct 2 19:22:56.083734 kernel: ... generic registers: 4 Oct 2 19:22:56.083752 kernel: ... value mask: 0000ffffffffffff Oct 2 19:22:56.083760 kernel: ... max period: 00007fffffffffff Oct 2 19:22:56.083770 kernel: ... fixed-purpose events: 0 Oct 2 19:22:56.083778 kernel: ... event mask: 000000000000000f Oct 2 19:22:56.083786 kernel: signal: max sigframe size: 1440 Oct 2 19:22:56.083793 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:22:56.083801 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:22:56.083809 kernel: x86: Booting SMP configuration: Oct 2 19:22:56.083819 kernel: .... node #0, CPUs: #1 Oct 2 19:22:56.083827 kernel: kvm-clock: cpu 1, msr 20f8a041, secondary cpu clock Oct 2 19:22:56.083835 kernel: kvm-guest: stealtime: cpu 1, msr 7dd1c0c0 Oct 2 19:22:56.083842 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:22:56.083862 kernel: smpboot: Max logical packages: 2 Oct 2 19:22:56.083871 kernel: smpboot: Total of 2 processors activated (7984.99 BogoMIPS) Oct 2 19:22:56.083878 kernel: devtmpfs: initialized Oct 2 19:22:56.083886 kernel: x86/mm: Memory block size: 128MB Oct 2 19:22:56.083894 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:22:56.083905 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:22:56.083913 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:22:56.083921 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:22:56.083929 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:22:56.083936 kernel: audit: type=2000 audit(1696274575.217:1): state=initialized audit_enabled=0 res=1 Oct 2 19:22:56.083944 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:22:56.083952 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:22:56.083960 kernel: cpuidle: using governor menu Oct 2 19:22:56.083968 kernel: ACPI: bus type PCI registered Oct 2 19:22:56.083978 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:22:56.083985 kernel: dca service started, version 1.12.1 Oct 2 19:22:56.083993 kernel: PCI: Using configuration type 1 for base access Oct 2 19:22:56.084001 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:22:56.084009 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:22:56.084017 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:22:56.084025 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:22:56.084032 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:22:56.084040 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:22:56.084050 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:22:56.084058 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:22:56.084066 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:22:56.084074 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:22:56.084081 kernel: ACPI: Interpreter enabled Oct 2 19:22:56.084089 kernel: ACPI: PM: (supports S0 S3 S5) Oct 2 19:22:56.084097 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:22:56.084105 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:22:56.084113 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Oct 2 19:22:56.084123 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:22:56.084261 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:22:56.084349 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Oct 2 19:22:56.084362 kernel: acpiphp: Slot [3] registered Oct 2 19:22:56.084370 kernel: acpiphp: Slot [4] registered Oct 2 19:22:56.084378 kernel: acpiphp: Slot [5] registered Oct 2 19:22:56.084386 kernel: acpiphp: Slot [6] registered Oct 2 19:22:56.084397 kernel: acpiphp: Slot [7] registered Oct 2 19:22:56.084405 kernel: acpiphp: Slot [8] registered Oct 2 19:22:56.084412 kernel: acpiphp: Slot [9] registered Oct 2 19:22:56.084420 kernel: acpiphp: Slot [10] registered Oct 2 19:22:56.084428 kernel: acpiphp: Slot [11] registered Oct 2 19:22:56.084436 kernel: acpiphp: Slot [12] registered Oct 2 19:22:56.084443 kernel: acpiphp: Slot [13] registered Oct 2 19:22:56.084451 kernel: acpiphp: Slot [14] registered Oct 2 19:22:56.084459 kernel: acpiphp: Slot [15] registered Oct 2 19:22:56.084467 kernel: acpiphp: Slot [16] registered Oct 2 19:22:56.084476 kernel: acpiphp: Slot [17] registered Oct 2 19:22:56.084484 kernel: acpiphp: Slot [18] registered Oct 2 19:22:56.084492 kernel: acpiphp: Slot [19] registered Oct 2 19:22:56.084499 kernel: acpiphp: Slot [20] registered Oct 2 19:22:56.084507 kernel: acpiphp: Slot [21] registered Oct 2 19:22:56.084515 kernel: acpiphp: Slot [22] registered Oct 2 19:22:56.084523 kernel: acpiphp: Slot [23] registered Oct 2 19:22:56.084530 kernel: acpiphp: Slot [24] registered Oct 2 19:22:56.084538 kernel: acpiphp: Slot [25] registered Oct 2 19:22:56.084548 kernel: acpiphp: Slot [26] registered Oct 2 19:22:56.084556 kernel: acpiphp: Slot [27] registered Oct 2 19:22:56.084564 kernel: acpiphp: Slot [28] registered Oct 2 19:22:56.084572 kernel: acpiphp: Slot [29] registered Oct 2 19:22:56.084579 kernel: acpiphp: Slot [30] registered Oct 2 19:22:56.084587 kernel: acpiphp: Slot [31] registered Oct 2 19:22:56.084595 kernel: PCI host bridge to bus 0000:00 Oct 2 19:22:56.084742 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:22:56.084826 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:22:56.084923 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:22:56.085017 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Oct 2 19:22:56.085096 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Oct 2 19:22:56.085169 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:22:56.085275 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:22:56.085371 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:22:56.085468 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Oct 2 19:22:56.085552 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc120-0xc12f] Oct 2 19:22:56.085635 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Oct 2 19:22:56.085718 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Oct 2 19:22:56.085801 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Oct 2 19:22:56.085923 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Oct 2 19:22:56.086020 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Oct 2 19:22:56.086108 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Oct 2 19:22:56.086191 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Oct 2 19:22:56.086286 kernel: pci 0000:00:02.0: [1af4:1050] type 00 class 0x030000 Oct 2 19:22:56.086370 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfe000000-0xfe7fffff pref] Oct 2 19:22:56.086455 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfe800000-0xfe803fff 64bit pref] Oct 2 19:22:56.086539 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfeb90000-0xfeb90fff] Oct 2 19:22:56.086626 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfeb80000-0xfeb8ffff pref] Oct 2 19:22:56.086725 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:22:56.086818 kernel: pci 0000:00:03.0: [1af4:1000] type 00 class 0x020000 Oct 2 19:22:56.092014 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc0bf] Oct 2 19:22:56.092118 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfeb91000-0xfeb91fff] Oct 2 19:22:56.092205 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe804000-0xfe807fff 64bit pref] Oct 2 19:22:56.092290 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfeb00000-0xfeb7ffff pref] Oct 2 19:22:56.092459 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Oct 2 19:22:56.092549 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Oct 2 19:22:56.092633 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfeb92000-0xfeb92fff] Oct 2 19:22:56.092716 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe808000-0xfe80bfff 64bit pref] Oct 2 19:22:56.092827 kernel: pci 0000:00:05.0: [1af4:1002] type 00 class 0x00ff00 Oct 2 19:22:56.092936 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0c0-0xc0ff] Oct 2 19:22:56.093021 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe80c000-0xfe80ffff 64bit pref] Oct 2 19:22:56.093118 kernel: pci 0000:00:06.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:22:56.093203 kernel: pci 0000:00:06.0: reg 0x10: [io 0xc100-0xc11f] Oct 2 19:22:56.093286 kernel: pci 0000:00:06.0: reg 0x20: [mem 0xfe810000-0xfe813fff 64bit pref] Oct 2 19:22:56.093298 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:22:56.093306 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:22:56.093314 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:22:56.093322 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:22:56.093331 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:22:56.093341 kernel: iommu: Default domain type: Translated Oct 2 19:22:56.093349 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:22:56.093433 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Oct 2 19:22:56.093517 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:22:56.093600 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Oct 2 19:22:56.093612 kernel: vgaarb: loaded Oct 2 19:22:56.093620 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:22:56.093628 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:22:56.093637 kernel: PTP clock support registered Oct 2 19:22:56.093647 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:22:56.093655 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:22:56.093663 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 19:22:56.093671 kernel: e820: reserve RAM buffer [mem 0x7ffdd000-0x7fffffff] Oct 2 19:22:56.093679 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:22:56.093687 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:22:56.093695 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:22:56.093703 kernel: pnp: PnP ACPI init Oct 2 19:22:56.093798 kernel: pnp 00:03: [dma 2] Oct 2 19:22:56.093820 kernel: pnp: PnP ACPI: found 5 devices Oct 2 19:22:56.093828 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:22:56.093837 kernel: NET: Registered PF_INET protocol family Oct 2 19:22:56.093844 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:22:56.093878 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Oct 2 19:22:56.093887 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:22:56.093896 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:22:56.093904 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Oct 2 19:22:56.093914 kernel: TCP: Hash tables configured (established 16384 bind 16384) Oct 2 19:22:56.093922 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 19:22:56.093931 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 19:22:56.093939 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:22:56.093946 kernel: NET: Registered PF_XDP protocol family Oct 2 19:22:56.094036 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:22:56.094132 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:22:56.094211 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:22:56.094292 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Oct 2 19:22:56.094370 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Oct 2 19:22:56.094454 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Oct 2 19:22:56.094537 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:22:56.094619 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:22:56.094641 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:22:56.094650 kernel: Initialise system trusted keyrings Oct 2 19:22:56.094659 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Oct 2 19:22:56.094670 kernel: Key type asymmetric registered Oct 2 19:22:56.094678 kernel: Asymmetric key parser 'x509' registered Oct 2 19:22:56.094686 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:22:56.094694 kernel: io scheduler mq-deadline registered Oct 2 19:22:56.094702 kernel: io scheduler kyber registered Oct 2 19:22:56.094710 kernel: io scheduler bfq registered Oct 2 19:22:56.094718 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:22:56.094726 kernel: ACPI: \_SB_.LNKB: Enabled at IRQ 10 Oct 2 19:22:56.094734 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Oct 2 19:22:56.094742 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Oct 2 19:22:56.094753 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Oct 2 19:22:56.094761 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:22:56.094769 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:22:56.094777 kernel: random: crng init done Oct 2 19:22:56.094785 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:22:56.094793 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:22:56.094801 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:22:56.094976 kernel: rtc_cmos 00:04: RTC can wake from S4 Oct 2 19:22:56.094994 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:22:56.095068 kernel: rtc_cmos 00:04: registered as rtc0 Oct 2 19:22:56.095143 kernel: rtc_cmos 00:04: setting system clock to 2023-10-02T19:22:55 UTC (1696274575) Oct 2 19:22:56.095217 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram Oct 2 19:22:56.095228 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:22:56.095237 kernel: Segment Routing with IPv6 Oct 2 19:22:56.095245 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:22:56.095252 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:22:56.095260 kernel: Key type dns_resolver registered Oct 2 19:22:56.095271 kernel: IPI shorthand broadcast: enabled Oct 2 19:22:56.095279 kernel: sched_clock: Marking stable (686720092, 119496052)->(831104336, -24888192) Oct 2 19:22:56.095288 kernel: registered taskstats version 1 Oct 2 19:22:56.095296 kernel: Loading compiled-in X.509 certificates Oct 2 19:22:56.095304 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:22:56.095312 kernel: Key type .fscrypt registered Oct 2 19:22:56.095320 kernel: Key type fscrypt-provisioning registered Oct 2 19:22:56.095328 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:22:56.095338 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:22:56.095346 kernel: ima: No architecture policies found Oct 2 19:22:56.095354 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:22:56.095362 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:22:56.095370 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:22:56.095378 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:22:56.095386 kernel: Run /init as init process Oct 2 19:22:56.095394 kernel: with arguments: Oct 2 19:22:56.095402 kernel: /init Oct 2 19:22:56.095413 kernel: with environment: Oct 2 19:22:56.095420 kernel: HOME=/ Oct 2 19:22:56.095428 kernel: TERM=linux Oct 2 19:22:56.095436 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:22:56.095447 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:22:56.095458 systemd[1]: Detected virtualization kvm. Oct 2 19:22:56.095467 systemd[1]: Detected architecture x86-64. Oct 2 19:22:56.095475 systemd[1]: Running in initrd. Oct 2 19:22:56.095488 systemd[1]: No hostname configured, using default hostname. Oct 2 19:22:56.095496 systemd[1]: Hostname set to . Oct 2 19:22:56.095505 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:22:56.095514 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:22:56.095522 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:22:56.095531 systemd[1]: Reached target cryptsetup.target. Oct 2 19:22:56.095540 systemd[1]: Reached target paths.target. Oct 2 19:22:56.095548 systemd[1]: Reached target slices.target. Oct 2 19:22:56.095558 systemd[1]: Reached target swap.target. Oct 2 19:22:56.095567 systemd[1]: Reached target timers.target. Oct 2 19:22:56.095576 systemd[1]: Listening on iscsid.socket. Oct 2 19:22:56.095584 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:22:56.095593 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:22:56.095601 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:22:56.095610 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:22:56.095618 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:22:56.095628 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:22:56.095637 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:22:56.095646 systemd[1]: Reached target sockets.target. Oct 2 19:22:56.095655 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:22:56.095675 systemd[1]: Finished network-cleanup.service. Oct 2 19:22:56.095685 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:22:56.095696 systemd[1]: Starting systemd-journald.service... Oct 2 19:22:56.095705 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:22:56.095714 systemd[1]: Starting systemd-resolved.service... Oct 2 19:22:56.095723 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:22:56.095732 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:22:56.095740 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:22:56.095752 systemd-journald[185]: Journal started Oct 2 19:22:56.095802 systemd-journald[185]: Runtime Journal (/run/log/journal/0d04da37eb404ab0bd52d0e466a3adef) is 4.9M, max 39.5M, 34.5M free. Oct 2 19:22:56.053889 systemd-modules-load[186]: Inserted module 'overlay' Oct 2 19:22:56.119272 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:22:56.119296 kernel: Bridge firewalling registered Oct 2 19:22:56.119315 systemd[1]: Started systemd-journald.service. Oct 2 19:22:56.119329 kernel: audit: type=1130 audit(1696274576.113:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.105283 systemd-resolved[187]: Positive Trust Anchors: Oct 2 19:22:56.105295 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:22:56.105331 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:22:56.128738 kernel: audit: type=1130 audit(1696274576.122:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.128755 kernel: audit: type=1130 audit(1696274576.123:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.128766 kernel: audit: type=1130 audit(1696274576.123:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.122000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.106902 systemd-modules-load[186]: Inserted module 'br_netfilter' Oct 2 19:22:56.108111 systemd-resolved[187]: Defaulting to hostname 'linux'. Oct 2 19:22:56.144447 kernel: SCSI subsystem initialized Oct 2 19:22:56.123518 systemd[1]: Started systemd-resolved.service. Oct 2 19:22:56.124109 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:22:56.124615 systemd[1]: Reached target nss-lookup.target. Oct 2 19:22:56.144625 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:22:56.147038 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:22:56.158044 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:22:56.158065 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:22:56.158076 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:22:56.156241 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:22:56.167603 kernel: audit: type=1130 audit(1696274576.158:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.167637 kernel: audit: type=1130 audit(1696274576.164:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.164000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.163898 systemd-modules-load[186]: Inserted module 'dm_multipath' Oct 2 19:22:56.164684 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:22:56.166007 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:22:56.181252 kernel: audit: type=1130 audit(1696274576.175:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.176158 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:22:56.187193 kernel: audit: type=1130 audit(1696274576.182:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.177482 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:22:56.183112 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:22:56.188444 dracut-cmdline[208]: dracut-dracut-053 Oct 2 19:22:56.191211 dracut-cmdline[208]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:22:56.256905 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:22:56.269911 kernel: iscsi: registered transport (tcp) Oct 2 19:22:56.294003 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:22:56.294061 kernel: QLogic iSCSI HBA Driver Oct 2 19:22:56.346811 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:22:56.352532 kernel: audit: type=1130 audit(1696274576.346:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.348196 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:22:56.432929 kernel: raid6: sse2x4 gen() 11449 MB/s Oct 2 19:22:56.449904 kernel: raid6: sse2x4 xor() 5112 MB/s Oct 2 19:22:56.466952 kernel: raid6: sse2x2 gen() 13924 MB/s Oct 2 19:22:56.483953 kernel: raid6: sse2x2 xor() 8421 MB/s Oct 2 19:22:56.500952 kernel: raid6: sse2x1 gen() 10617 MB/s Oct 2 19:22:56.518688 kernel: raid6: sse2x1 xor() 6687 MB/s Oct 2 19:22:56.518759 kernel: raid6: using algorithm sse2x2 gen() 13924 MB/s Oct 2 19:22:56.518786 kernel: raid6: .... xor() 8421 MB/s, rmw enabled Oct 2 19:22:56.519528 kernel: raid6: using ssse3x2 recovery algorithm Oct 2 19:22:56.535672 kernel: xor: measuring software checksum speed Oct 2 19:22:56.535732 kernel: prefetch64-sse : 17233 MB/sec Oct 2 19:22:56.538145 kernel: generic_sse : 15697 MB/sec Oct 2 19:22:56.538192 kernel: xor: using function: prefetch64-sse (17233 MB/sec) Oct 2 19:22:56.653923 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:22:56.669704 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:22:56.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.671000 audit: BPF prog-id=7 op=LOAD Oct 2 19:22:56.671000 audit: BPF prog-id=8 op=LOAD Oct 2 19:22:56.674226 systemd[1]: Starting systemd-udevd.service... Oct 2 19:22:56.688495 systemd-udevd[385]: Using default interface naming scheme 'v252'. Oct 2 19:22:56.693000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.693520 systemd[1]: Started systemd-udevd.service. Oct 2 19:22:56.698124 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:22:56.723295 dracut-pre-trigger[401]: rd.md=0: removing MD RAID activation Oct 2 19:22:56.770252 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:22:56.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.773164 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:22:56.816844 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:22:56.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:56.883034 kernel: libata version 3.00 loaded. Oct 2 19:22:56.886877 kernel: virtio_blk virtio2: [vda] 41943040 512-byte logical blocks (21.5 GB/20.0 GiB) Oct 2 19:22:56.887044 kernel: ata_piix 0000:00:01.1: version 2.13 Oct 2 19:22:56.888486 kernel: scsi host0: ata_piix Oct 2 19:22:56.892882 kernel: scsi host1: ata_piix Oct 2 19:22:56.893022 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc120 irq 14 Oct 2 19:22:56.893035 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc128 irq 15 Oct 2 19:22:56.902876 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:22:56.902934 kernel: GPT:17805311 != 41943039 Oct 2 19:22:56.902946 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:22:56.902958 kernel: GPT:17805311 != 41943039 Oct 2 19:22:56.902968 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:22:56.902979 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:22:57.073921 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (441) Oct 2 19:22:57.101925 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:22:57.113216 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:22:57.131524 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:22:57.137218 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:22:57.138318 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:22:57.140266 systemd[1]: Starting disk-uuid.service... Oct 2 19:22:57.154178 disk-uuid[458]: Primary Header is updated. Oct 2 19:22:57.154178 disk-uuid[458]: Secondary Entries is updated. Oct 2 19:22:57.154178 disk-uuid[458]: Secondary Header is updated. Oct 2 19:22:57.161896 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:22:57.172922 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:22:58.177917 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:22:58.179258 disk-uuid[459]: The operation has completed successfully. Oct 2 19:22:58.244060 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:22:58.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:58.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:58.244294 systemd[1]: Finished disk-uuid.service. Oct 2 19:22:58.258736 systemd[1]: Starting verity-setup.service... Oct 2 19:22:58.279763 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:22:58.373053 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:22:58.377165 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:22:58.384343 systemd[1]: Finished verity-setup.service. Oct 2 19:22:58.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:58.515938 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:22:58.516271 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:22:58.516920 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:22:58.517715 systemd[1]: Starting ignition-setup.service... Oct 2 19:22:58.518880 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:22:58.547319 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:22:58.547358 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:22:58.547370 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:22:58.584907 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:22:58.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:58.607848 systemd[1]: Finished ignition-setup.service. Oct 2 19:22:58.609148 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:22:58.690914 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:22:58.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:58.691000 audit: BPF prog-id=9 op=LOAD Oct 2 19:22:58.693456 systemd[1]: Starting systemd-networkd.service... Oct 2 19:22:58.721977 systemd-networkd[628]: lo: Link UP Oct 2 19:22:58.721987 systemd-networkd[628]: lo: Gained carrier Oct 2 19:22:58.723541 systemd-networkd[628]: Enumeration completed Oct 2 19:22:58.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:58.723653 systemd[1]: Started systemd-networkd.service. Oct 2 19:22:58.724222 systemd-networkd[628]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:22:58.725101 systemd[1]: Reached target network.target. Oct 2 19:22:58.727565 systemd-networkd[628]: eth0: Link UP Oct 2 19:22:58.727574 systemd-networkd[628]: eth0: Gained carrier Oct 2 19:22:58.729411 systemd[1]: Starting iscsiuio.service... Oct 2 19:22:58.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:58.737557 systemd[1]: Started iscsiuio.service. Oct 2 19:22:58.740467 systemd[1]: Starting iscsid.service... Oct 2 19:22:58.744972 iscsid[633]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:22:58.744972 iscsid[633]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:22:58.744972 iscsid[633]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:22:58.744972 iscsid[633]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:22:58.744972 iscsid[633]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:22:58.744972 iscsid[633]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:22:58.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:58.745937 systemd[1]: Started iscsid.service. Oct 2 19:22:58.746434 systemd-networkd[628]: eth0: DHCPv4 address 172.24.4.120/24, gateway 172.24.4.1 acquired from 172.24.4.1 Oct 2 19:22:58.750059 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:22:58.765832 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:22:58.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:58.766425 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:22:58.767425 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:22:58.768277 systemd[1]: Reached target remote-fs.target. Oct 2 19:22:58.769907 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:22:58.778037 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:22:58.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:58.956745 ignition[584]: Ignition 2.14.0 Oct 2 19:22:58.958448 ignition[584]: Stage: fetch-offline Oct 2 19:22:58.959798 ignition[584]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:22:58.959849 ignition[584]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:22:58.962173 ignition[584]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:22:58.962375 ignition[584]: parsed url from cmdline: "" Oct 2 19:22:58.962385 ignition[584]: no config URL provided Oct 2 19:22:58.964925 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:22:58.962398 ignition[584]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:22:58.965000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:58.968380 systemd[1]: Starting ignition-fetch.service... Oct 2 19:22:58.962416 ignition[584]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:22:58.962437 ignition[584]: failed to fetch config: resource requires networking Oct 2 19:22:58.963074 ignition[584]: Ignition finished successfully Oct 2 19:22:58.984620 ignition[651]: Ignition 2.14.0 Oct 2 19:22:58.984645 ignition[651]: Stage: fetch Oct 2 19:22:58.984990 ignition[651]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:22:58.985041 ignition[651]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:22:58.987290 ignition[651]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:22:58.987528 ignition[651]: parsed url from cmdline: "" Oct 2 19:22:58.987538 ignition[651]: no config URL provided Oct 2 19:22:58.987551 ignition[651]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:22:58.987570 ignition[651]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:22:58.994995 ignition[651]: config drive ("/dev/disk/by-label/config-2") not found. Waiting... Oct 2 19:22:58.995052 ignition[651]: GET http://169.254.169.254/openstack/latest/user_data: attempt #1 Oct 2 19:22:58.995410 ignition[651]: config drive ("/dev/disk/by-label/CONFIG-2") not found. Waiting... Oct 2 19:22:59.484111 ignition[651]: GET result: OK Oct 2 19:22:59.485273 ignition[651]: parsing config with SHA512: 1a1491781a80d35aede29845c34010eb75e1808aa4adacd0e59bf42a0c5803f5d84a0ef2e98f732e5e947691f03240bce288df06c2e33a78a55853e06435a9a8 Oct 2 19:22:59.549213 unknown[651]: fetched base config from "system" Oct 2 19:22:59.550836 unknown[651]: fetched base config from "system" Oct 2 19:22:59.552173 unknown[651]: fetched user config from "openstack" Oct 2 19:22:59.554744 ignition[651]: fetch: fetch complete Oct 2 19:22:59.556004 ignition[651]: fetch: fetch passed Oct 2 19:22:59.557244 ignition[651]: Ignition finished successfully Oct 2 19:22:59.560424 systemd[1]: Finished ignition-fetch.service. Oct 2 19:22:59.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:59.563154 systemd[1]: Starting ignition-kargs.service... Oct 2 19:22:59.584214 ignition[657]: Ignition 2.14.0 Oct 2 19:22:59.584240 ignition[657]: Stage: kargs Oct 2 19:22:59.584466 ignition[657]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:22:59.584507 ignition[657]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:22:59.586546 ignition[657]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:22:59.602345 ignition[657]: kargs: kargs passed Oct 2 19:22:59.602465 ignition[657]: Ignition finished successfully Oct 2 19:22:59.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:59.606280 systemd[1]: Finished ignition-kargs.service. Oct 2 19:22:59.608788 systemd[1]: Starting ignition-disks.service... Oct 2 19:22:59.623649 ignition[663]: Ignition 2.14.0 Oct 2 19:22:59.625186 ignition[663]: Stage: disks Oct 2 19:22:59.626446 ignition[663]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:22:59.628053 ignition[663]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:22:59.630259 ignition[663]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:22:59.634485 ignition[663]: disks: disks passed Oct 2 19:22:59.635637 ignition[663]: Ignition finished successfully Oct 2 19:22:59.637619 systemd[1]: Finished ignition-disks.service. Oct 2 19:22:59.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:59.638765 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:22:59.640116 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:22:59.641472 systemd[1]: Reached target local-fs.target. Oct 2 19:22:59.642820 systemd[1]: Reached target sysinit.target. Oct 2 19:22:59.643800 systemd[1]: Reached target basic.target. Oct 2 19:22:59.645438 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:22:59.664564 systemd-fsck[670]: ROOT: clean, 603/1628000 files, 124049/1617920 blocks Oct 2 19:22:59.678546 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:22:59.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:59.681354 systemd[1]: Mounting sysroot.mount... Oct 2 19:22:59.700933 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:22:59.702157 systemd[1]: Mounted sysroot.mount. Oct 2 19:22:59.703551 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:22:59.708110 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:22:59.709946 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:22:59.711328 systemd[1]: Starting flatcar-openstack-hostname.service... Oct 2 19:22:59.716646 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:22:59.716720 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:22:59.723703 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:22:59.731223 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:22:59.736982 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:22:59.760428 initrd-setup-root[682]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:22:59.763820 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/vda6 scanned by mount (677) Oct 2 19:22:59.771576 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:22:59.771640 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:22:59.771652 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:22:59.774670 initrd-setup-root[706]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:22:59.779614 initrd-setup-root[714]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:22:59.786745 initrd-setup-root[722]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:22:59.793171 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:22:59.870201 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:22:59.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:59.872629 systemd[1]: Starting ignition-mount.service... Oct 2 19:22:59.877447 systemd[1]: Starting sysroot-boot.service... Oct 2 19:22:59.883322 systemd-networkd[628]: eth0: Gained IPv6LL Oct 2 19:22:59.896571 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:22:59.896691 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:22:59.925521 ignition[745]: INFO : Ignition 2.14.0 Oct 2 19:22:59.926425 ignition[745]: INFO : Stage: mount Oct 2 19:22:59.927102 ignition[745]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:22:59.927846 ignition[745]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:22:59.930294 ignition[745]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:22:59.933014 ignition[745]: INFO : mount: mount passed Oct 2 19:22:59.933622 ignition[745]: INFO : Ignition finished successfully Oct 2 19:22:59.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:59.935829 systemd[1]: Finished ignition-mount.service. Oct 2 19:22:59.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:59.948218 systemd[1]: Finished sysroot-boot.service. Oct 2 19:22:59.954218 coreos-metadata[676]: Oct 02 19:22:59.954 INFO Fetching http://169.254.169.254/latest/meta-data/hostname: Attempt #1 Oct 2 19:22:59.975991 coreos-metadata[676]: Oct 02 19:22:59.975 INFO Fetch successful Oct 2 19:22:59.976623 coreos-metadata[676]: Oct 02 19:22:59.976 INFO wrote hostname ci-3510-3-0-4-c08ee46f57.novalocal to /sysroot/etc/hostname Oct 2 19:22:59.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:59.980000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:59.980654 systemd[1]: flatcar-openstack-hostname.service: Deactivated successfully. Oct 2 19:22:59.980756 systemd[1]: Finished flatcar-openstack-hostname.service. Oct 2 19:22:59.982060 systemd[1]: Starting ignition-files.service... Oct 2 19:22:59.992403 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:23:00.005976 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/vda6 scanned by mount (754) Oct 2 19:23:00.011420 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:23:00.011442 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:23:00.011453 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:23:00.023523 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:23:00.046624 ignition[773]: INFO : Ignition 2.14.0 Oct 2 19:23:00.046624 ignition[773]: INFO : Stage: files Oct 2 19:23:00.048758 ignition[773]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:23:00.048758 ignition[773]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:23:00.052099 ignition[773]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:23:00.054287 ignition[773]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:23:00.056301 ignition[773]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:23:00.056301 ignition[773]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:23:00.063555 ignition[773]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:23:00.065032 ignition[773]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:23:00.066382 ignition[773]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:23:00.065688 unknown[773]: wrote ssh authorized keys file for user: core Oct 2 19:23:00.071784 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:23:00.071784 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 19:23:00.266438 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:23:00.502529 ignition[773]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 19:23:00.504145 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:23:00.505141 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:23:00.506147 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:23:00.774157 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:23:01.041433 ignition[773]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: a3a2c02a90b008686c20babaf272e703924db2a3e2a0d4e2a7c81d994cbc68c47458a4a354ecc243af095b390815c7f203348b9749351ae817bd52a522300449 Oct 2 19:23:01.044961 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:23:01.044961 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:23:01.044961 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:23:01.211553 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:23:02.757420 ignition[773]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 1c324cd645a7bf93d19d24c87498d9a17878eb1cc927e2680200ffeab2f85051ddec47d85b79b8e774042dc6726299ad3d7caf52c060701f00deba30dc33f660 Oct 2 19:23:02.764108 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:23:02.764108 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:23:02.764108 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:23:02.911026 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:23:05.919257 ignition[773]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 40daf2a9b9e666c14b10e627da931bd79978628b1f23ef6429c1cb4fcba261f86ccff440c0dbb0070ee760fe55772b4fd279c4582dfbb17fa30bc94b7f00126b Oct 2 19:23:05.922898 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:23:05.922898 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:23:05.922898 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:23:06.078919 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:23:07.735607 ignition[773]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 97840854134909d75a1a2563628cc4ba632067369ce7fc8a8a1e90a387d32dd7bfd73f4f5b5a82ef842088e7470692951eb7fc869c5f297dd740f855672ee628 Oct 2 19:23:07.738619 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:23:07.740097 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:23:07.741962 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:23:07.741962 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:23:07.741962 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:23:07.741962 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:23:07.741962 ignition[773]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:23:07.741962 ignition[773]: INFO : files: op(b): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:23:07.750834 ignition[773]: INFO : files: op(b): op(c): [started] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata-sshkeys@.service.d/20-clct-provider-override.conf" Oct 2 19:23:07.750834 ignition[773]: INFO : files: op(b): op(c): [finished] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata-sshkeys@.service.d/20-clct-provider-override.conf" Oct 2 19:23:07.750834 ignition[773]: INFO : files: op(b): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:23:07.750834 ignition[773]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Oct 2 19:23:07.750834 ignition[773]: INFO : files: op(d): op(e): [started] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata.service.d/20-clct-provider-override.conf" Oct 2 19:23:07.750834 ignition[773]: INFO : files: op(d): op(e): [finished] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata.service.d/20-clct-provider-override.conf" Oct 2 19:23:07.750834 ignition[773]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Oct 2 19:23:07.750834 ignition[773]: INFO : files: op(f): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:23:07.750834 ignition[773]: INFO : files: op(f): op(10): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:23:07.750834 ignition[773]: INFO : files: op(f): op(10): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:23:07.750834 ignition[773]: INFO : files: op(f): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:23:07.750834 ignition[773]: INFO : files: op(11): [started] processing unit "prepare-critools.service" Oct 2 19:23:07.750834 ignition[773]: INFO : files: op(11): op(12): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:23:07.750834 ignition[773]: INFO : files: op(11): op(12): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:23:07.750834 ignition[773]: INFO : files: op(11): [finished] processing unit "prepare-critools.service" Oct 2 19:23:07.750834 ignition[773]: INFO : files: op(13): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:23:07.815906 kernel: kauditd_printk_skb: 27 callbacks suppressed Oct 2 19:23:07.815928 kernel: audit: type=1130 audit(1696274587.762:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.815941 kernel: audit: type=1130 audit(1696274587.782:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.815952 kernel: audit: type=1131 audit(1696274587.782:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.815964 kernel: audit: type=1130 audit(1696274587.805:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.816100 ignition[773]: INFO : files: op(13): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:23:07.816100 ignition[773]: INFO : files: op(14): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:23:07.816100 ignition[773]: INFO : files: op(14): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:23:07.816100 ignition[773]: INFO : files: op(15): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:23:07.816100 ignition[773]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:23:07.816100 ignition[773]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:23:07.816100 ignition[773]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:23:07.816100 ignition[773]: INFO : files: files passed Oct 2 19:23:07.816100 ignition[773]: INFO : Ignition finished successfully Oct 2 19:23:07.757669 systemd[1]: Finished ignition-files.service. Oct 2 19:23:07.767437 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:23:07.824123 initrd-setup-root-after-ignition[798]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:23:07.774404 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:23:07.775711 systemd[1]: Starting ignition-quench.service... Oct 2 19:23:07.781908 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:23:07.782047 systemd[1]: Finished ignition-quench.service. Oct 2 19:23:07.805519 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:23:07.807143 systemd[1]: Reached target ignition-complete.target. Oct 2 19:23:07.812308 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:23:07.835058 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:23:07.835159 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:23:07.842903 kernel: audit: type=1130 audit(1696274587.835:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.842926 kernel: audit: type=1131 audit(1696274587.835:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.835000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.836204 systemd[1]: Reached target initrd-fs.target. Oct 2 19:23:07.843328 systemd[1]: Reached target initrd.target. Oct 2 19:23:07.844269 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:23:07.844889 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:23:07.855617 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:23:07.866654 kernel: audit: type=1130 audit(1696274587.855:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.856744 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:23:07.866214 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:23:07.867067 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:23:07.867814 systemd[1]: Stopped target timers.target. Oct 2 19:23:07.872936 kernel: audit: type=1131 audit(1696274587.868:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.868646 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:23:07.868817 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:23:07.869611 systemd[1]: Stopped target initrd.target. Oct 2 19:23:07.873441 systemd[1]: Stopped target basic.target. Oct 2 19:23:07.874312 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:23:07.875178 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:23:07.875994 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:23:07.880420 systemd[1]: Stopped target remote-fs.target. Oct 2 19:23:07.881282 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:23:07.882184 systemd[1]: Stopped target sysinit.target. Oct 2 19:23:07.883050 systemd[1]: Stopped target local-fs.target. Oct 2 19:23:07.883841 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:23:07.889845 kernel: audit: type=1131 audit(1696274587.885:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.885000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.884659 systemd[1]: Stopped target swap.target. Oct 2 19:23:07.885398 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:23:07.894795 kernel: audit: type=1131 audit(1696274587.890:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.885536 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:23:07.894000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.886346 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:23:07.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.890363 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:23:07.890511 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:23:07.907000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.907000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.891381 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:23:07.915840 iscsid[633]: iscsid shutting down. Oct 2 19:23:07.891526 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:23:07.916000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.917956 ignition[811]: INFO : Ignition 2.14.0 Oct 2 19:23:07.917956 ignition[811]: INFO : Stage: umount Oct 2 19:23:07.917956 ignition[811]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:23:07.917956 ignition[811]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 19:23:07.917956 ignition[811]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 19:23:07.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.922000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.895399 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:23:07.928409 ignition[811]: INFO : umount: umount passed Oct 2 19:23:07.928409 ignition[811]: INFO : Ignition finished successfully Oct 2 19:23:07.927000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.928000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.929000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.930000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.895533 systemd[1]: Stopped ignition-files.service. Oct 2 19:23:07.896969 systemd[1]: Stopping ignition-mount.service... Oct 2 19:23:07.897682 systemd[1]: Stopping iscsid.service... Oct 2 19:23:07.906802 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:23:07.907303 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:23:07.907454 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:23:07.908032 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:23:07.908158 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:23:07.913312 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:23:07.916486 systemd[1]: Stopped iscsid.service. Oct 2 19:23:07.940000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.918737 systemd[1]: Stopping iscsiuio.service... Oct 2 19:23:07.919785 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:23:07.921931 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:23:07.923378 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:23:07.923464 systemd[1]: Stopped iscsiuio.service. Oct 2 19:23:07.924721 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:23:07.924793 systemd[1]: Stopped ignition-mount.service. Oct 2 19:23:07.926763 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:23:07.926803 systemd[1]: Stopped ignition-disks.service. Oct 2 19:23:07.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.928801 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:23:07.928838 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:23:07.954000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.929759 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:23:07.955000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:23:07.929795 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:23:07.930240 systemd[1]: Stopped target network.target. Oct 2 19:23:07.930632 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:23:07.930671 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:23:07.931281 systemd[1]: Stopped target paths.target. Oct 2 19:23:07.932134 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:23:07.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.933948 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:23:07.960000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.934436 systemd[1]: Stopped target slices.target. Oct 2 19:23:07.937630 systemd[1]: Stopped target sockets.target. Oct 2 19:23:07.938501 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:23:07.938530 systemd[1]: Closed iscsid.socket. Oct 2 19:23:07.939451 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:23:07.964000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.939480 systemd[1]: Closed iscsiuio.socket. Oct 2 19:23:07.940312 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:23:07.940363 systemd[1]: Stopped ignition-setup.service. Oct 2 19:23:07.941281 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:23:07.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.942347 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:23:07.946019 systemd-networkd[628]: eth0: DHCPv6 lease lost Oct 2 19:23:07.969000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:23:07.970000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.948082 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:23:07.948175 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:23:07.950598 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:23:07.950720 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:23:07.956037 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:23:07.956072 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:23:07.974000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.957584 systemd[1]: Stopping network-cleanup.service... Oct 2 19:23:07.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.959785 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:23:07.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.959843 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:23:07.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.960762 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:23:07.960813 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:23:07.961964 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:23:07.985000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.962013 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:23:07.986000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.965092 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:23:07.987000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.967454 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:23:07.967543 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:23:07.968318 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:23:07.989000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.968434 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:23:07.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:07.970027 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:23:07.970114 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:23:07.971720 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:23:07.971756 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:23:07.973588 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:23:07.973626 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:23:07.974424 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:23:07.974470 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:23:07.975361 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:23:07.975403 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:23:07.976171 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:23:07.976213 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:23:07.977074 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:23:07.977116 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:23:07.978590 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:23:07.985132 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:23:07.985178 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:23:07.986409 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:23:07.986446 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:23:07.987062 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:23:07.987096 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:23:07.988734 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 19:23:07.989217 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:23:07.989290 systemd[1]: Stopped network-cleanup.service. Oct 2 19:23:07.990311 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:23:07.990383 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:23:07.991224 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:23:07.992498 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:23:08.010942 systemd[1]: Switching root. Oct 2 19:23:08.028496 systemd-journald[185]: Journal stopped Oct 2 19:23:12.126111 systemd-journald[185]: Received SIGTERM from PID 1 (systemd). Oct 2 19:23:12.126177 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:23:12.126200 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:23:12.126212 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:23:12.126223 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:23:12.126237 kernel: SELinux: policy capability open_perms=1 Oct 2 19:23:12.126249 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:23:12.126260 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:23:12.126270 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:23:12.126281 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:23:12.126293 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:23:12.126305 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:23:12.126317 systemd[1]: Successfully loaded SELinux policy in 97.683ms. Oct 2 19:23:12.126342 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 21.984ms. Oct 2 19:23:12.126357 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:23:12.126370 systemd[1]: Detected virtualization kvm. Oct 2 19:23:12.126382 systemd[1]: Detected architecture x86-64. Oct 2 19:23:12.126394 systemd[1]: Detected first boot. Oct 2 19:23:12.126407 systemd[1]: Hostname set to . Oct 2 19:23:12.126419 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:23:12.126435 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:23:12.126448 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:23:12.126461 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:23:12.126475 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:23:12.126488 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:23:12.126500 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:23:12.126513 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:23:12.126527 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:23:12.126539 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:23:12.126552 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:23:12.126566 systemd[1]: Created slice system-getty.slice. Oct 2 19:23:12.126579 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:23:12.126591 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:23:12.126603 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:23:12.126627 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:23:12.126641 systemd[1]: Created slice user.slice. Oct 2 19:23:12.126655 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:23:12.126668 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:23:12.126680 systemd[1]: Set up automount boot.automount. Oct 2 19:23:12.126692 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:23:12.126704 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:23:12.126719 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:23:12.126734 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:23:12.126746 systemd[1]: Reached target integritysetup.target. Oct 2 19:23:12.126759 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:23:12.126774 systemd[1]: Reached target remote-fs.target. Oct 2 19:23:12.126786 systemd[1]: Reached target slices.target. Oct 2 19:23:12.126798 systemd[1]: Reached target swap.target. Oct 2 19:23:12.126810 systemd[1]: Reached target torcx.target. Oct 2 19:23:12.126822 systemd[1]: Reached target veritysetup.target. Oct 2 19:23:12.126835 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:23:12.126849 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:23:12.126876 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:23:12.126888 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:23:12.126901 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:23:12.126913 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:23:12.126925 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:23:12.126941 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:23:12.126954 systemd[1]: Mounting media.mount... Oct 2 19:23:12.126966 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:23:12.126979 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:23:12.126993 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:23:12.127006 systemd[1]: Mounting tmp.mount... Oct 2 19:23:12.127018 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:23:12.127031 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:23:12.127043 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:23:12.127054 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:23:12.127066 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:23:12.127078 systemd[1]: Starting modprobe@drm.service... Oct 2 19:23:12.127091 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:23:12.127105 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:23:12.127118 systemd[1]: Starting modprobe@loop.service... Oct 2 19:23:12.127131 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:23:12.127143 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:23:12.127155 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:23:12.127167 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:23:12.127179 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:23:12.127191 systemd[1]: Stopped systemd-journald.service. Oct 2 19:23:12.127204 systemd[1]: Starting systemd-journald.service... Oct 2 19:23:12.127218 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:23:12.127230 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:23:12.127242 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:23:12.127255 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:23:12.127268 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:23:12.130898 systemd[1]: Stopped verity-setup.service. Oct 2 19:23:12.130920 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:23:12.130933 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:23:12.130946 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:23:12.130961 systemd[1]: Mounted media.mount. Oct 2 19:23:12.130974 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:23:12.130987 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:23:12.130999 systemd[1]: Mounted tmp.mount. Oct 2 19:23:12.131012 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:23:12.131024 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:23:12.131037 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:23:12.131049 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:23:12.131062 systemd[1]: Finished modprobe@drm.service. Oct 2 19:23:12.131142 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:23:12.131156 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:23:12.131168 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:23:12.131181 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:23:12.131193 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:23:12.131208 systemd[1]: Reached target network-pre.target. Oct 2 19:23:12.131220 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:23:12.131232 kernel: loop: module loaded Oct 2 19:23:12.131244 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:23:12.131257 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:23:12.131270 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:23:12.131282 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:23:12.131294 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:23:12.131307 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:23:12.131321 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:23:12.131333 systemd[1]: Finished modprobe@loop.service. Oct 2 19:23:12.131349 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:23:12.131363 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:23:12.131376 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:23:12.131392 systemd-journald[910]: Journal started Oct 2 19:23:12.131436 systemd-journald[910]: Runtime Journal (/run/log/journal/0d04da37eb404ab0bd52d0e466a3adef) is 4.9M, max 39.5M, 34.5M free. Oct 2 19:23:08.340000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:23:08.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:23:08.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:23:08.468000 audit: BPF prog-id=10 op=LOAD Oct 2 19:23:08.468000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:23:08.468000 audit: BPF prog-id=11 op=LOAD Oct 2 19:23:08.468000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:23:11.892000 audit: BPF prog-id=12 op=LOAD Oct 2 19:23:11.892000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:23:11.892000 audit: BPF prog-id=13 op=LOAD Oct 2 19:23:11.892000 audit: BPF prog-id=14 op=LOAD Oct 2 19:23:11.892000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:23:11.892000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:23:11.894000 audit: BPF prog-id=15 op=LOAD Oct 2 19:23:11.894000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:23:11.894000 audit: BPF prog-id=16 op=LOAD Oct 2 19:23:11.894000 audit: BPF prog-id=17 op=LOAD Oct 2 19:23:11.894000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:23:12.134933 systemd[1]: Started systemd-journald.service. Oct 2 19:23:11.894000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:23:11.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:11.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:11.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:11.909000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:23:12.006000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.015000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.015000 audit: BPF prog-id=18 op=LOAD Oct 2 19:23:12.015000 audit: BPF prog-id=19 op=LOAD Oct 2 19:23:12.016000 audit: BPF prog-id=20 op=LOAD Oct 2 19:23:12.016000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:23:12.016000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:23:12.042000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.065000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.123000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:23:12.123000 audit[910]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7fffeb798210 a2=4000 a3=7fffeb7982ac items=0 ppid=1 pid=910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:12.123000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:23:12.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:08.648638 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:08Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:23:11.891355 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:23:08.649664 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:08Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:23:11.891368 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:23:08.649718 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:08Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:23:11.895705 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:23:12.144967 systemd-journald[910]: Time spent on flushing to /var/log/journal/0d04da37eb404ab0bd52d0e466a3adef is 23.474ms for 1082 entries. Oct 2 19:23:12.144967 systemd-journald[910]: System Journal (/var/log/journal/0d04da37eb404ab0bd52d0e466a3adef) is 8.0M, max 584.8M, 576.8M free. Oct 2 19:23:12.180036 systemd-journald[910]: Received client request to flush runtime journal. Oct 2 19:23:12.180088 kernel: fuse: init (API version 7.34) Oct 2 19:23:12.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.154000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.164000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:08.649887 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:08Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:23:12.134635 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:23:08.649919 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:08Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:23:12.135218 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:23:08.649995 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:08Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:23:12.136617 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:23:08.650030 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:08Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:23:12.149649 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:23:08.650492 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:08Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:23:12.154499 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:23:08.650661 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:08Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:23:12.156460 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:23:08.650705 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:08Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:23:12.160326 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:23:08.652664 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:08Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:23:12.164433 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:23:08.652755 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:08Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:23:12.180889 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:23:08.652806 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:08Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:23:08.652847 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:08Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:23:08.652974 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:08Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:23:08.653015 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:08Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:23:11.459981 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:11Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:23:11.460272 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:11Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:23:11.460386 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:11Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:23:11.460573 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:11Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:23:11.460633 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:11Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:23:11.460700 /usr/lib/systemd/system-generators/torcx-generator[844]: time="2023-10-02T19:23:11Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:23:12.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.192568 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:23:12.200879 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:23:12.217835 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:23:12.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.219534 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:23:12.230117 udevadm[955]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:23:12.254334 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:23:12.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.255899 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:23:12.294911 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:23:12.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.853780 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:23:12.866362 kernel: kauditd_printk_skb: 93 callbacks suppressed Oct 2 19:23:12.866521 kernel: audit: type=1130 audit(1696274592.854:139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.869600 kernel: audit: type=1334 audit(1696274592.865:140): prog-id=21 op=LOAD Oct 2 19:23:12.865000 audit: BPF prog-id=21 op=LOAD Oct 2 19:23:12.867699 systemd[1]: Starting systemd-udevd.service... Oct 2 19:23:12.865000 audit: BPF prog-id=22 op=LOAD Oct 2 19:23:12.865000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:23:12.865000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:23:12.876116 kernel: audit: type=1334 audit(1696274592.865:141): prog-id=22 op=LOAD Oct 2 19:23:12.876240 kernel: audit: type=1334 audit(1696274592.865:142): prog-id=7 op=UNLOAD Oct 2 19:23:12.876287 kernel: audit: type=1334 audit(1696274592.865:143): prog-id=8 op=UNLOAD Oct 2 19:23:12.910476 systemd-udevd[958]: Using default interface naming scheme 'v252'. Oct 2 19:23:12.955334 systemd[1]: Started systemd-udevd.service. Oct 2 19:23:12.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.967893 kernel: audit: type=1130 audit(1696274592.958:144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:12.972000 audit: BPF prog-id=23 op=LOAD Oct 2 19:23:12.980942 kernel: audit: type=1334 audit(1696274592.972:145): prog-id=23 op=LOAD Oct 2 19:23:12.981123 systemd[1]: Starting systemd-networkd.service... Oct 2 19:23:12.990000 audit: BPF prog-id=24 op=LOAD Oct 2 19:23:12.994931 kernel: audit: type=1334 audit(1696274592.990:146): prog-id=24 op=LOAD Oct 2 19:23:12.994000 audit: BPF prog-id=25 op=LOAD Oct 2 19:23:13.000905 kernel: audit: type=1334 audit(1696274592.994:147): prog-id=25 op=LOAD Oct 2 19:23:13.000849 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:23:12.994000 audit: BPF prog-id=26 op=LOAD Oct 2 19:23:13.007029 kernel: audit: type=1334 audit(1696274592.994:148): prog-id=26 op=LOAD Oct 2 19:23:13.019816 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:23:13.059619 systemd[1]: Started systemd-userdbd.service. Oct 2 19:23:13.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:13.077922 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 Oct 2 19:23:13.127947 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:23:13.148000 audit[972]: AVC avc: denied { confidentiality } for pid=972 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:23:13.168092 systemd-networkd[974]: lo: Link UP Oct 2 19:23:13.168099 systemd-networkd[974]: lo: Gained carrier Oct 2 19:23:13.168552 systemd-networkd[974]: Enumeration completed Oct 2 19:23:13.168677 systemd-networkd[974]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:23:13.169538 systemd[1]: Started systemd-networkd.service. Oct 2 19:23:13.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:13.171059 systemd-networkd[974]: eth0: Link UP Oct 2 19:23:13.171066 systemd-networkd[974]: eth0: Gained carrier Oct 2 19:23:13.148000 audit[972]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=562b85530090 a1=32194 a2=7f11d3fbabc5 a3=5 items=106 ppid=958 pid=972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:13.148000 audit: CWD cwd="/" Oct 2 19:23:13.148000 audit: PATH item=0 name=(null) inode=12209 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=1 name=(null) inode=12210 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=2 name=(null) inode=12209 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=3 name=(null) inode=12211 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=4 name=(null) inode=12209 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=5 name=(null) inode=12212 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=6 name=(null) inode=12212 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=7 name=(null) inode=12213 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=8 name=(null) inode=12212 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=9 name=(null) inode=12214 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=10 name=(null) inode=12212 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=11 name=(null) inode=12215 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=12 name=(null) inode=12212 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=13 name=(null) inode=12216 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=14 name=(null) inode=12212 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=15 name=(null) inode=12217 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=16 name=(null) inode=12209 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=17 name=(null) inode=12218 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=18 name=(null) inode=12218 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=19 name=(null) inode=12219 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=20 name=(null) inode=12218 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=21 name=(null) inode=12220 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=22 name=(null) inode=12218 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=23 name=(null) inode=12221 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=24 name=(null) inode=12218 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=25 name=(null) inode=12222 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=26 name=(null) inode=12218 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=27 name=(null) inode=12223 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=28 name=(null) inode=12209 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=29 name=(null) inode=12224 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=30 name=(null) inode=12224 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=31 name=(null) inode=12225 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=32 name=(null) inode=12224 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=33 name=(null) inode=12226 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=34 name=(null) inode=12224 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=35 name=(null) inode=12227 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=36 name=(null) inode=12224 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=37 name=(null) inode=12228 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=38 name=(null) inode=12224 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=39 name=(null) inode=12229 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=40 name=(null) inode=12209 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=41 name=(null) inode=12230 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=42 name=(null) inode=12230 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=43 name=(null) inode=12231 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=44 name=(null) inode=12230 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=45 name=(null) inode=12232 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=46 name=(null) inode=12230 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=47 name=(null) inode=12233 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=48 name=(null) inode=12230 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=49 name=(null) inode=12234 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=50 name=(null) inode=12230 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=51 name=(null) inode=12235 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=52 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=53 name=(null) inode=12236 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=54 name=(null) inode=12236 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=55 name=(null) inode=12237 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=56 name=(null) inode=12236 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=57 name=(null) inode=12238 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=58 name=(null) inode=12236 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=59 name=(null) inode=12239 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=60 name=(null) inode=12239 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=61 name=(null) inode=12240 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=62 name=(null) inode=12239 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=63 name=(null) inode=12241 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=64 name=(null) inode=12239 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=65 name=(null) inode=12242 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=66 name=(null) inode=12239 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=67 name=(null) inode=12243 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=68 name=(null) inode=12239 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=69 name=(null) inode=12244 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=70 name=(null) inode=12236 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=71 name=(null) inode=12245 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=72 name=(null) inode=12245 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=73 name=(null) inode=12246 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=74 name=(null) inode=12245 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=75 name=(null) inode=12247 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=76 name=(null) inode=12245 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=77 name=(null) inode=12248 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=78 name=(null) inode=12245 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=79 name=(null) inode=12249 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=80 name=(null) inode=12245 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=81 name=(null) inode=12250 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=82 name=(null) inode=12236 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=83 name=(null) inode=12251 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=84 name=(null) inode=12251 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=85 name=(null) inode=12252 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=86 name=(null) inode=12251 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=87 name=(null) inode=12253 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=88 name=(null) inode=12251 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=89 name=(null) inode=12254 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=90 name=(null) inode=12251 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=91 name=(null) inode=12255 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=92 name=(null) inode=12251 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=93 name=(null) inode=12256 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=94 name=(null) inode=12236 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=95 name=(null) inode=12257 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=96 name=(null) inode=12257 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=97 name=(null) inode=12258 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=98 name=(null) inode=12257 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=99 name=(null) inode=12259 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=100 name=(null) inode=12257 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=101 name=(null) inode=12260 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=102 name=(null) inode=12257 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=103 name=(null) inode=12261 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=104 name=(null) inode=12257 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PATH item=105 name=(null) inode=12262 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:23:13.148000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:23:13.182997 systemd-networkd[974]: eth0: DHCPv4 address 172.24.4.120/24, gateway 172.24.4.1 acquired from 172.24.4.1 Oct 2 19:23:13.190917 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Oct 2 19:23:13.204931 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input4 Oct 2 19:23:13.205255 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:23:13.209881 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:23:13.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:13.255254 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:23:13.257181 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:23:13.507270 lvm[987]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:23:13.547713 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:23:13.548000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:13.549147 systemd[1]: Reached target cryptsetup.target. Oct 2 19:23:13.552595 systemd[1]: Starting lvm2-activation.service... Oct 2 19:23:13.560356 lvm[988]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:23:13.596426 systemd[1]: Finished lvm2-activation.service. Oct 2 19:23:13.596000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:13.597828 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:23:13.599062 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:23:13.599125 systemd[1]: Reached target local-fs.target. Oct 2 19:23:13.600220 systemd[1]: Reached target machines.target. Oct 2 19:23:13.603932 systemd[1]: Starting ldconfig.service... Oct 2 19:23:13.606286 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:23:13.606382 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:23:13.608806 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:23:13.616511 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:23:13.619749 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:23:13.621113 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:23:13.621208 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:23:13.625246 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:23:13.657377 systemd[1]: boot.automount: Got automount request for /boot, triggered by 990 (bootctl) Oct 2 19:23:13.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:13.659536 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:23:13.672607 systemd-tmpfiles[993]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:23:13.707905 systemd-tmpfiles[993]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:23:13.711210 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:23:13.743280 systemd-tmpfiles[993]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:23:14.018019 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:23:14.019337 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:23:14.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:14.200168 systemd-fsck[999]: fsck.fat 4.2 (2021-01-31) Oct 2 19:23:14.200168 systemd-fsck[999]: /dev/vda1: 789 files, 115069/258078 clusters Oct 2 19:23:14.205952 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:23:14.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:14.210506 systemd[1]: Mounting boot.mount... Oct 2 19:23:14.241126 systemd[1]: Mounted boot.mount. Oct 2 19:23:14.282016 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:23:14.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:14.347576 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:23:14.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:14.351537 systemd[1]: Starting audit-rules.service... Oct 2 19:23:14.356409 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:23:14.362418 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:23:14.371000 audit: BPF prog-id=27 op=LOAD Oct 2 19:23:14.377302 systemd[1]: Starting systemd-resolved.service... Oct 2 19:23:14.383000 audit: BPF prog-id=28 op=LOAD Oct 2 19:23:14.386896 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:23:14.390437 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:23:14.391691 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:23:14.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:14.392603 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:23:14.400000 audit[1014]: SYSTEM_BOOT pid=1014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:23:14.403032 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:23:14.402000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:14.435920 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:23:14.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:14.459000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:23:14.459000 audit[1022]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd977e8540 a2=420 a3=0 items=0 ppid=1002 pid=1022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:14.459000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:23:14.461585 augenrules[1022]: No rules Oct 2 19:23:14.461085 systemd[1]: Finished audit-rules.service. Oct 2 19:23:14.468286 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:23:14.468841 systemd[1]: Reached target time-set.target. Oct 2 19:23:14.489491 systemd-timesyncd[1012]: Contacted time server 188.165.29.16:123 (0.flatcar.pool.ntp.org). Oct 2 19:23:14.489665 systemd-timesyncd[1012]: Initial clock synchronization to Mon 2023-10-02 19:23:14.815883 UTC. Oct 2 19:23:14.502009 systemd-resolved[1011]: Positive Trust Anchors: Oct 2 19:23:14.502023 systemd-resolved[1011]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:23:14.502059 systemd-resolved[1011]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:23:14.520371 systemd-resolved[1011]: Using system hostname 'ci-3510-3-0-4-c08ee46f57.novalocal'. Oct 2 19:23:14.522404 systemd[1]: Started systemd-resolved.service. Oct 2 19:23:14.523240 systemd[1]: Reached target network.target. Oct 2 19:23:14.524073 systemd[1]: Reached target nss-lookup.target. Oct 2 19:23:14.739186 ldconfig[989]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:23:14.752151 systemd[1]: Finished ldconfig.service. Oct 2 19:23:14.756061 systemd[1]: Starting systemd-update-done.service... Oct 2 19:23:14.768922 systemd[1]: Finished systemd-update-done.service. Oct 2 19:23:14.770377 systemd[1]: Reached target sysinit.target. Oct 2 19:23:14.772202 systemd[1]: Started motdgen.path. Oct 2 19:23:14.773413 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:23:14.775370 systemd[1]: Started logrotate.timer. Oct 2 19:23:14.777119 systemd[1]: Started mdadm.timer. Oct 2 19:23:14.778183 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:23:14.779401 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:23:14.779473 systemd[1]: Reached target paths.target. Oct 2 19:23:14.780526 systemd[1]: Reached target timers.target. Oct 2 19:23:14.782659 systemd[1]: Listening on dbus.socket. Oct 2 19:23:14.786109 systemd[1]: Starting docker.socket... Oct 2 19:23:14.793128 systemd[1]: Listening on sshd.socket. Oct 2 19:23:14.794439 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:23:14.795532 systemd[1]: Listening on docker.socket. Oct 2 19:23:14.796728 systemd[1]: Reached target sockets.target. Oct 2 19:23:14.798167 systemd[1]: Reached target basic.target. Oct 2 19:23:14.799939 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:23:14.800056 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:23:14.803525 systemd[1]: Starting containerd.service... Oct 2 19:23:14.807747 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:23:14.812789 systemd[1]: Starting dbus.service... Oct 2 19:23:14.816340 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:23:14.820323 systemd[1]: Starting extend-filesystems.service... Oct 2 19:23:14.822075 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:23:14.826220 systemd[1]: Starting motdgen.service... Oct 2 19:23:14.831474 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:23:14.839344 jq[1036]: false Oct 2 19:23:14.838302 systemd[1]: Starting prepare-critools.service... Oct 2 19:23:14.844150 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:23:14.849793 systemd[1]: Starting sshd-keygen.service... Oct 2 19:23:14.861989 systemd[1]: Starting systemd-logind.service... Oct 2 19:23:14.864997 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:23:14.865098 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:23:14.870949 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:23:14.871693 systemd[1]: Starting update-engine.service... Oct 2 19:23:14.873172 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:23:14.875848 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:23:14.876065 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:23:14.882239 extend-filesystems[1037]: Found vda Oct 2 19:23:14.884660 systemd[1]: Created slice system-sshd.slice. Oct 2 19:23:14.888292 jq[1054]: true Oct 2 19:23:14.899549 tar[1056]: ./ Oct 2 19:23:14.899549 tar[1056]: ./macvlan Oct 2 19:23:14.901507 dbus-daemon[1035]: [system] SELinux support is enabled Oct 2 19:23:14.901700 systemd[1]: Started dbus.service. Oct 2 19:23:14.904354 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:23:14.904377 systemd[1]: Reached target system-config.target. Oct 2 19:23:14.904835 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:23:14.904868 systemd[1]: Reached target user-config.target. Oct 2 19:23:14.907299 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:23:14.907456 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:23:14.912211 tar[1058]: crictl Oct 2 19:23:14.912624 extend-filesystems[1037]: Found vda1 Oct 2 19:23:14.913429 extend-filesystems[1037]: Found vda2 Oct 2 19:23:14.934359 extend-filesystems[1037]: Found vda3 Oct 2 19:23:14.934359 extend-filesystems[1037]: Found usr Oct 2 19:23:14.934359 extend-filesystems[1037]: Found vda4 Oct 2 19:23:14.934359 extend-filesystems[1037]: Found vda6 Oct 2 19:23:14.934359 extend-filesystems[1037]: Found vda7 Oct 2 19:23:14.934359 extend-filesystems[1037]: Found vda9 Oct 2 19:23:14.934359 extend-filesystems[1037]: Checking size of /dev/vda9 Oct 2 19:23:14.931359 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:23:14.979485 jq[1061]: true Oct 2 19:23:14.980221 extend-filesystems[1037]: Resized partition /dev/vda9 Oct 2 19:23:14.931527 systemd[1]: Finished motdgen.service. Oct 2 19:23:14.982685 extend-filesystems[1085]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:23:14.987270 systemd-networkd[974]: eth0: Gained IPv6LL Oct 2 19:23:15.020904 kernel: EXT4-fs (vda9): resizing filesystem from 1617920 to 4635643 blocks Oct 2 19:23:15.069919 update_engine[1053]: I1002 19:23:15.068603 1053 main.cc:92] Flatcar Update Engine starting Oct 2 19:23:15.092780 systemd-logind[1052]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:23:15.092799 systemd-logind[1052]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:23:15.093155 systemd-logind[1052]: New seat seat0. Oct 2 19:23:15.097132 systemd[1]: Started systemd-logind.service. Oct 2 19:23:15.107116 env[1059]: time="2023-10-02T19:23:15.105445625Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:23:15.112425 systemd[1]: Started update-engine.service. Oct 2 19:23:15.112747 update_engine[1053]: I1002 19:23:15.112517 1053 update_check_scheduler.cc:74] Next update check in 3m45s Oct 2 19:23:15.115700 systemd[1]: Started locksmithd.service. Oct 2 19:23:15.130920 kernel: EXT4-fs (vda9): resized filesystem to 4635643 Oct 2 19:23:15.132998 coreos-metadata[1032]: Oct 02 19:23:15.132 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys: Attempt #1 Oct 2 19:23:15.191024 env[1059]: time="2023-10-02T19:23:15.162666854Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:23:15.193878 bash[1089]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:23:15.193803 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:23:15.195628 extend-filesystems[1085]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Oct 2 19:23:15.195628 extend-filesystems[1085]: old_desc_blocks = 1, new_desc_blocks = 3 Oct 2 19:23:15.195628 extend-filesystems[1085]: The filesystem on /dev/vda9 is now 4635643 (4k) blocks long. Oct 2 19:23:15.205916 extend-filesystems[1037]: Resized filesystem in /dev/vda9 Oct 2 19:23:15.209568 env[1059]: time="2023-10-02T19:23:15.197248575Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:23:15.209568 env[1059]: time="2023-10-02T19:23:15.200174703Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:23:15.209568 env[1059]: time="2023-10-02T19:23:15.200226446Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:23:15.209568 env[1059]: time="2023-10-02T19:23:15.200565713Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:23:15.209568 env[1059]: time="2023-10-02T19:23:15.200612857Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:23:15.209568 env[1059]: time="2023-10-02T19:23:15.200636830Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:23:15.209568 env[1059]: time="2023-10-02T19:23:15.200651012Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:23:15.209568 env[1059]: time="2023-10-02T19:23:15.200766531Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:23:15.209568 env[1059]: time="2023-10-02T19:23:15.201170535Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:23:15.209568 env[1059]: time="2023-10-02T19:23:15.201359913Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:23:15.195714 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:23:15.210106 tar[1056]: ./static Oct 2 19:23:15.210154 env[1059]: time="2023-10-02T19:23:15.201383084Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:23:15.210154 env[1059]: time="2023-10-02T19:23:15.201473910Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:23:15.210154 env[1059]: time="2023-10-02T19:23:15.201490470Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:23:15.195868 systemd[1]: Finished extend-filesystems.service. Oct 2 19:23:15.219758 env[1059]: time="2023-10-02T19:23:15.218787826Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:23:15.219758 env[1059]: time="2023-10-02T19:23:15.218845356Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:23:15.219758 env[1059]: time="2023-10-02T19:23:15.218884461Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:23:15.219758 env[1059]: time="2023-10-02T19:23:15.218933430Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:23:15.219758 env[1059]: time="2023-10-02T19:23:15.218951157Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:23:15.219758 env[1059]: time="2023-10-02T19:23:15.219016465Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:23:15.219758 env[1059]: time="2023-10-02T19:23:15.219033421Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:23:15.219758 env[1059]: time="2023-10-02T19:23:15.219048844Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:23:15.219758 env[1059]: time="2023-10-02T19:23:15.219063318Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:23:15.219758 env[1059]: time="2023-10-02T19:23:15.219078230Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:23:15.219758 env[1059]: time="2023-10-02T19:23:15.219092484Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:23:15.219758 env[1059]: time="2023-10-02T19:23:15.219106645Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:23:15.219758 env[1059]: time="2023-10-02T19:23:15.219268912Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:23:15.219758 env[1059]: time="2023-10-02T19:23:15.219392001Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:23:15.220903 env[1059]: time="2023-10-02T19:23:15.219731926Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:23:15.220903 env[1059]: time="2023-10-02T19:23:15.220251803Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:23:15.220903 env[1059]: time="2023-10-02T19:23:15.220270709Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:23:15.220903 env[1059]: time="2023-10-02T19:23:15.220338760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:23:15.220903 env[1059]: time="2023-10-02T19:23:15.220356591Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:23:15.220903 env[1059]: time="2023-10-02T19:23:15.220371733Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:23:15.220903 env[1059]: time="2023-10-02T19:23:15.220440420Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:23:15.220903 env[1059]: time="2023-10-02T19:23:15.220459305Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:23:15.220903 env[1059]: time="2023-10-02T19:23:15.220473884Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:23:15.220903 env[1059]: time="2023-10-02T19:23:15.220487637Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:23:15.220903 env[1059]: time="2023-10-02T19:23:15.220501007Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:23:15.220903 env[1059]: time="2023-10-02T19:23:15.220517889Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:23:15.220903 env[1059]: time="2023-10-02T19:23:15.220680322Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:23:15.220903 env[1059]: time="2023-10-02T19:23:15.220699530Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:23:15.220903 env[1059]: time="2023-10-02T19:23:15.220715046Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:23:15.221289 env[1059]: time="2023-10-02T19:23:15.220730303Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:23:15.221289 env[1059]: time="2023-10-02T19:23:15.220748311Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:23:15.221289 env[1059]: time="2023-10-02T19:23:15.220762003Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:23:15.221289 env[1059]: time="2023-10-02T19:23:15.220782473Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:23:15.221289 env[1059]: time="2023-10-02T19:23:15.220820544Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:23:15.221690 env[1059]: time="2023-10-02T19:23:15.221619030Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:23:15.225366 env[1059]: time="2023-10-02T19:23:15.221832519Z" level=info msg="Connect containerd service" Oct 2 19:23:15.225366 env[1059]: time="2023-10-02T19:23:15.221871248Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:23:15.225366 env[1059]: time="2023-10-02T19:23:15.222508343Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:23:15.225366 env[1059]: time="2023-10-02T19:23:15.222755439Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:23:15.225366 env[1059]: time="2023-10-02T19:23:15.222822449Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:23:15.225366 env[1059]: time="2023-10-02T19:23:15.222900115Z" level=info msg="containerd successfully booted in 0.163245s" Oct 2 19:23:15.223105 systemd[1]: Started containerd.service. Oct 2 19:23:15.231040 env[1059]: time="2023-10-02T19:23:15.230975010Z" level=info msg="Start subscribing containerd event" Oct 2 19:23:15.231202 env[1059]: time="2023-10-02T19:23:15.231185171Z" level=info msg="Start recovering state" Oct 2 19:23:15.231370 env[1059]: time="2023-10-02T19:23:15.231341588Z" level=info msg="Start event monitor" Oct 2 19:23:15.231450 env[1059]: time="2023-10-02T19:23:15.231435156Z" level=info msg="Start snapshots syncer" Oct 2 19:23:15.231560 env[1059]: time="2023-10-02T19:23:15.231543762Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:23:15.233010 env[1059]: time="2023-10-02T19:23:15.232970312Z" level=info msg="Start streaming server" Oct 2 19:23:15.269946 tar[1056]: ./vlan Oct 2 19:23:15.350566 tar[1056]: ./portmap Oct 2 19:23:15.428766 tar[1056]: ./host-local Oct 2 19:23:15.458231 coreos-metadata[1032]: Oct 02 19:23:15.458 INFO Fetch successful Oct 2 19:23:15.458231 coreos-metadata[1032]: Oct 02 19:23:15.458 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:23:15.473850 coreos-metadata[1032]: Oct 02 19:23:15.473 INFO Fetch successful Oct 2 19:23:15.482125 unknown[1032]: wrote ssh authorized keys file for user: core Oct 2 19:23:15.499722 tar[1056]: ./vrf Oct 2 19:23:15.513663 update-ssh-keys[1097]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:23:15.513918 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:23:15.568526 tar[1056]: ./bridge Oct 2 19:23:15.658842 tar[1056]: ./tuning Oct 2 19:23:15.709126 systemd[1]: Finished prepare-critools.service. Oct 2 19:23:15.717389 tar[1056]: ./firewall Oct 2 19:23:15.764985 tar[1056]: ./host-device Oct 2 19:23:15.805773 tar[1056]: ./sbr Oct 2 19:23:15.842021 tar[1056]: ./loopback Oct 2 19:23:15.875107 tar[1056]: ./dhcp Oct 2 19:23:15.977676 tar[1056]: ./ptp Oct 2 19:23:16.022443 tar[1056]: ./ipvlan Oct 2 19:23:16.063500 tar[1056]: ./bandwidth Oct 2 19:23:16.113922 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:23:16.120408 locksmithd[1093]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:23:17.911531 sshd_keygen[1065]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:23:17.939212 systemd[1]: Finished sshd-keygen.service. Oct 2 19:23:17.943628 systemd[1]: Starting issuegen.service... Oct 2 19:23:17.947217 systemd[1]: Started sshd@0-172.24.4.120:22-172.24.4.1:51552.service. Oct 2 19:23:17.950103 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:23:17.950277 systemd[1]: Finished issuegen.service. Oct 2 19:23:17.952290 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:23:17.968600 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:23:17.970581 systemd[1]: Started getty@tty1.service. Oct 2 19:23:17.972183 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:23:17.973139 systemd[1]: Reached target getty.target. Oct 2 19:23:17.973766 systemd[1]: Reached target multi-user.target. Oct 2 19:23:17.976754 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:23:17.985609 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:23:17.985766 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:23:17.986425 systemd[1]: Startup finished in 1.012s (kernel) + 12.377s (initrd) + 9.774s (userspace) = 23.164s. Oct 2 19:23:19.299792 sshd[1114]: Accepted publickey for core from 172.24.4.1 port 51552 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:23:19.303235 sshd[1114]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:23:19.333769 systemd-logind[1052]: New session 1 of user core. Oct 2 19:23:19.336212 systemd[1]: Created slice user-500.slice. Oct 2 19:23:19.338822 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:23:19.359264 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:23:19.362778 systemd[1]: Starting user@500.service... Oct 2 19:23:19.370198 (systemd)[1123]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:23:19.496042 systemd[1123]: Queued start job for default target default.target. Oct 2 19:23:19.496554 systemd[1123]: Reached target paths.target. Oct 2 19:23:19.496573 systemd[1123]: Reached target sockets.target. Oct 2 19:23:19.496588 systemd[1123]: Reached target timers.target. Oct 2 19:23:19.496601 systemd[1123]: Reached target basic.target. Oct 2 19:23:19.496725 systemd[1]: Started user@500.service. Oct 2 19:23:19.497666 systemd[1]: Started session-1.scope. Oct 2 19:23:19.498154 systemd[1123]: Reached target default.target. Oct 2 19:23:19.498297 systemd[1123]: Startup finished in 115ms. Oct 2 19:23:19.980990 systemd[1]: Started sshd@1-172.24.4.120:22-172.24.4.1:51554.service. Oct 2 19:23:22.122130 sshd[1132]: Accepted publickey for core from 172.24.4.1 port 51554 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:23:22.125803 sshd[1132]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:23:22.137127 systemd-logind[1052]: New session 2 of user core. Oct 2 19:23:22.138505 systemd[1]: Started session-2.scope. Oct 2 19:23:22.766968 sshd[1132]: pam_unix(sshd:session): session closed for user core Oct 2 19:23:22.773540 systemd[1]: Started sshd@2-172.24.4.120:22-172.24.4.1:51558.service. Oct 2 19:23:22.776781 systemd[1]: sshd@1-172.24.4.120:22-172.24.4.1:51554.service: Deactivated successfully. Oct 2 19:23:22.778500 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:23:22.781280 systemd-logind[1052]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:23:22.784444 systemd-logind[1052]: Removed session 2. Oct 2 19:23:24.063498 sshd[1137]: Accepted publickey for core from 172.24.4.1 port 51558 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:23:24.066976 sshd[1137]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:23:24.076792 systemd-logind[1052]: New session 3 of user core. Oct 2 19:23:24.077664 systemd[1]: Started session-3.scope. Oct 2 19:23:24.624802 sshd[1137]: pam_unix(sshd:session): session closed for user core Oct 2 19:23:24.631713 systemd[1]: Started sshd@3-172.24.4.120:22-172.24.4.1:41434.service. Oct 2 19:23:24.634477 systemd[1]: sshd@2-172.24.4.120:22-172.24.4.1:51558.service: Deactivated successfully. Oct 2 19:23:24.636263 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:23:24.638981 systemd-logind[1052]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:23:24.641833 systemd-logind[1052]: Removed session 3. Oct 2 19:23:25.783020 sshd[1143]: Accepted publickey for core from 172.24.4.1 port 41434 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:23:25.787467 sshd[1143]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:23:25.799630 systemd-logind[1052]: New session 4 of user core. Oct 2 19:23:25.799924 systemd[1]: Started session-4.scope. Oct 2 19:23:26.611369 sshd[1143]: pam_unix(sshd:session): session closed for user core Oct 2 19:23:26.618732 systemd[1]: Started sshd@4-172.24.4.120:22-172.24.4.1:41450.service. Oct 2 19:23:26.620970 systemd[1]: sshd@3-172.24.4.120:22-172.24.4.1:41434.service: Deactivated successfully. Oct 2 19:23:26.622663 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:23:26.626715 systemd-logind[1052]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:23:26.629692 systemd-logind[1052]: Removed session 4. Oct 2 19:23:27.807519 sshd[1149]: Accepted publickey for core from 172.24.4.1 port 41450 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:23:27.811017 sshd[1149]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:23:27.824062 systemd-logind[1052]: New session 5 of user core. Oct 2 19:23:27.824733 systemd[1]: Started session-5.scope. Oct 2 19:23:28.291972 sudo[1153]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:23:28.293318 sudo[1153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:23:28.309258 dbus-daemon[1035]: \xd0}\x8d-\xf3U: received setenforce notice (enforcing=187080592) Oct 2 19:23:28.313768 sudo[1153]: pam_unix(sudo:session): session closed for user root Oct 2 19:23:28.508337 sshd[1149]: pam_unix(sshd:session): session closed for user core Oct 2 19:23:28.516812 systemd[1]: Started sshd@5-172.24.4.120:22-172.24.4.1:41466.service. Oct 2 19:23:28.518453 systemd[1]: sshd@4-172.24.4.120:22-172.24.4.1:41450.service: Deactivated successfully. Oct 2 19:23:28.520120 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:23:28.524993 systemd-logind[1052]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:23:28.527752 systemd-logind[1052]: Removed session 5. Oct 2 19:23:29.703115 sshd[1156]: Accepted publickey for core from 172.24.4.1 port 41466 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:23:29.706294 sshd[1156]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:23:29.715457 systemd[1]: Started session-6.scope. Oct 2 19:23:29.715640 systemd-logind[1052]: New session 6 of user core. Oct 2 19:23:30.123827 sudo[1161]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:23:30.124760 sudo[1161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:23:30.131687 sudo[1161]: pam_unix(sudo:session): session closed for user root Oct 2 19:23:30.142395 sudo[1160]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:23:30.143595 sudo[1160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:23:30.164478 systemd[1]: Stopping audit-rules.service... Oct 2 19:23:30.166000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:23:30.171058 kernel: kauditd_printk_skb: 129 callbacks suppressed Oct 2 19:23:30.171196 kernel: audit: type=1305 audit(1696274610.166:167): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:23:30.166000 audit[1164]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd6edaee20 a2=420 a3=0 items=0 ppid=1 pid=1164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:30.186010 kernel: audit: type=1300 audit(1696274610.166:167): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd6edaee20 a2=420 a3=0 items=0 ppid=1 pid=1164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:30.186156 kernel: audit: type=1327 audit(1696274610.166:167): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:23:30.166000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:23:30.189331 auditctl[1164]: No rules Oct 2 19:23:30.190564 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:23:30.190967 systemd[1]: Stopped audit-rules.service. Oct 2 19:23:30.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:30.201136 kernel: audit: type=1131 audit(1696274610.190:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:30.201938 systemd[1]: Starting audit-rules.service... Oct 2 19:23:30.239614 augenrules[1181]: No rules Oct 2 19:23:30.241987 systemd[1]: Finished audit-rules.service. Oct 2 19:23:30.243801 sudo[1160]: pam_unix(sudo:session): session closed for user root Oct 2 19:23:30.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:30.243000 audit[1160]: USER_END pid=1160 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:23:30.254931 kernel: audit: type=1130 audit(1696274610.241:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:30.255091 kernel: audit: type=1106 audit(1696274610.243:170): pid=1160 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:23:30.255153 kernel: audit: type=1104 audit(1696274610.243:171): pid=1160 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:23:30.243000 audit[1160]: CRED_DISP pid=1160 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:23:30.398808 sshd[1156]: pam_unix(sshd:session): session closed for user core Oct 2 19:23:30.399000 audit[1156]: USER_END pid=1156 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:23:30.411409 systemd[1]: Started sshd@6-172.24.4.120:22-172.24.4.1:41468.service. Oct 2 19:23:30.416926 kernel: audit: type=1106 audit(1696274610.399:172): pid=1156 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:23:30.420838 systemd[1]: sshd@5-172.24.4.120:22-172.24.4.1:41466.service: Deactivated successfully. Oct 2 19:23:30.400000 audit[1156]: CRED_DISP pid=1156 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:23:30.422718 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:23:30.433899 kernel: audit: type=1104 audit(1696274610.400:173): pid=1156 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:23:30.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.120:22-172.24.4.1:41468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:30.445708 systemd-logind[1052]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:23:30.446034 kernel: audit: type=1130 audit(1696274610.408:174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.120:22-172.24.4.1:41468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:30.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.24.4.120:22-172.24.4.1:41466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:30.448585 systemd-logind[1052]: Removed session 6. Oct 2 19:23:31.669000 audit[1186]: USER_ACCT pid=1186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:23:31.670339 sshd[1186]: Accepted publickey for core from 172.24.4.1 port 41468 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:23:31.672000 audit[1186]: CRED_ACQ pid=1186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:23:31.672000 audit[1186]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff425a3890 a2=3 a3=0 items=0 ppid=1 pid=1186 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:31.672000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:23:31.674507 sshd[1186]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:23:31.682622 systemd[1]: Started session-7.scope. Oct 2 19:23:31.683959 systemd-logind[1052]: New session 7 of user core. Oct 2 19:23:31.691000 audit[1186]: USER_START pid=1186 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:23:31.694000 audit[1189]: CRED_ACQ pid=1189 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:23:32.093000 audit[1190]: USER_ACCT pid=1190 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:23:32.093000 audit[1190]: CRED_REFR pid=1190 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:23:32.094723 sudo[1190]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:23:32.094993 sudo[1190]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:23:32.096000 audit[1190]: USER_START pid=1190 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:23:32.833771 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:23:32.841575 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:23:32.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:32.842117 systemd[1]: Reached target network-online.target. Oct 2 19:23:32.843976 systemd[1]: Starting docker.service... Oct 2 19:23:32.980348 env[1206]: time="2023-10-02T19:23:32.980205698Z" level=info msg="Starting up" Oct 2 19:23:32.983462 env[1206]: time="2023-10-02T19:23:32.983409003Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:23:32.983676 env[1206]: time="2023-10-02T19:23:32.983641533Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:23:32.983840 env[1206]: time="2023-10-02T19:23:32.983801263Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:23:32.984028 env[1206]: time="2023-10-02T19:23:32.983996004Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:23:32.993315 env[1206]: time="2023-10-02T19:23:32.993263944Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:23:32.993606 env[1206]: time="2023-10-02T19:23:32.993539859Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:23:32.993780 env[1206]: time="2023-10-02T19:23:32.993740466Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:23:32.993990 env[1206]: time="2023-10-02T19:23:32.993955168Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:23:33.004551 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport226649699-merged.mount: Deactivated successfully. Oct 2 19:23:33.124212 env[1206]: time="2023-10-02T19:23:33.123509540Z" level=info msg="Loading containers: start." Oct 2 19:23:33.234000 audit[1238]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1238 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.234000 audit[1238]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffc1c06d390 a2=0 a3=7ffc1c06d37c items=0 ppid=1206 pid=1238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.234000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:23:33.236000 audit[1240]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1240 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.236000 audit[1240]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd707c1a40 a2=0 a3=7ffd707c1a2c items=0 ppid=1206 pid=1240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.236000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:23:33.239000 audit[1242]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1242 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.239000 audit[1242]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff1d34a590 a2=0 a3=7fff1d34a57c items=0 ppid=1206 pid=1242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.239000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:23:33.241000 audit[1244]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1244 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.241000 audit[1244]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffdfd32370 a2=0 a3=7fffdfd3235c items=0 ppid=1206 pid=1244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.241000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:23:33.244000 audit[1246]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1246 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.244000 audit[1246]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffea69eaa0 a2=0 a3=7fffea69ea8c items=0 ppid=1206 pid=1246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.244000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:23:33.273000 audit[1251]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1251 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.273000 audit[1251]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdc19fc650 a2=0 a3=7ffdc19fc63c items=0 ppid=1206 pid=1251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.273000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:23:33.289000 audit[1253]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.289000 audit[1253]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcc6b45580 a2=0 a3=7ffcc6b4556c items=0 ppid=1206 pid=1253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.289000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:23:33.294000 audit[1255]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.294000 audit[1255]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd96b644d0 a2=0 a3=7ffd96b644bc items=0 ppid=1206 pid=1255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.294000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:23:33.299000 audit[1257]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1257 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.299000 audit[1257]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffd1af55fc0 a2=0 a3=7ffd1af55fac items=0 ppid=1206 pid=1257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.299000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:23:33.319000 audit[1261]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.319000 audit[1261]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffae220220 a2=0 a3=7fffae22020c items=0 ppid=1206 pid=1261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.319000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:23:33.322000 audit[1262]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1262 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.322000 audit[1262]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe2c238710 a2=0 a3=7ffe2c2386fc items=0 ppid=1206 pid=1262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.322000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:23:33.344945 kernel: Initializing XFRM netlink socket Oct 2 19:23:33.403335 env[1206]: time="2023-10-02T19:23:33.403126358Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:23:33.448000 audit[1270]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1270 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.448000 audit[1270]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffd47ac76a0 a2=0 a3=7ffd47ac768c items=0 ppid=1206 pid=1270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.448000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:23:33.462000 audit[1273]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1273 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.462000 audit[1273]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffd8a2d6bc0 a2=0 a3=7ffd8a2d6bac items=0 ppid=1206 pid=1273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.462000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:23:33.466000 audit[1276]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.466000 audit[1276]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffde0094500 a2=0 a3=7ffde00944ec items=0 ppid=1206 pid=1276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.466000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:23:33.468000 audit[1278]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.468000 audit[1278]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe2031f040 a2=0 a3=7ffe2031f02c items=0 ppid=1206 pid=1278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.468000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:23:33.470000 audit[1280]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1280 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.470000 audit[1280]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffc69f15f90 a2=0 a3=7ffc69f15f7c items=0 ppid=1206 pid=1280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.470000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:23:33.473000 audit[1282]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1282 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.473000 audit[1282]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffef9c51390 a2=0 a3=7ffef9c5137c items=0 ppid=1206 pid=1282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.473000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:23:33.475000 audit[1284]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1284 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.475000 audit[1284]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fff17d74080 a2=0 a3=7fff17d7406c items=0 ppid=1206 pid=1284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.475000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:23:33.485000 audit[1287]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1287 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.485000 audit[1287]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffe0d3d32a0 a2=0 a3=7ffe0d3d328c items=0 ppid=1206 pid=1287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.485000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:23:33.487000 audit[1289]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.487000 audit[1289]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffd106f3300 a2=0 a3=7ffd106f32ec items=0 ppid=1206 pid=1289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.487000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:23:33.490000 audit[1291]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1291 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.490000 audit[1291]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fffbf837e30 a2=0 a3=7fffbf837e1c items=0 ppid=1206 pid=1291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.490000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:23:33.492000 audit[1293]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1293 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.492000 audit[1293]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd0d6b8770 a2=0 a3=7ffd0d6b875c items=0 ppid=1206 pid=1293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.492000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:23:33.494380 systemd-networkd[974]: docker0: Link UP Oct 2 19:23:33.504000 audit[1297]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1297 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.504000 audit[1297]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdb8a9b540 a2=0 a3=7ffdb8a9b52c items=0 ppid=1206 pid=1297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.504000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:23:33.505000 audit[1298]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:23:33.505000 audit[1298]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd8b60f7e0 a2=0 a3=7ffd8b60f7cc items=0 ppid=1206 pid=1298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:23:33.505000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:23:33.507052 env[1206]: time="2023-10-02T19:23:33.506988378Z" level=info msg="Loading containers: done." Oct 2 19:23:33.520758 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1198592522-merged.mount: Deactivated successfully. Oct 2 19:23:33.538267 env[1206]: time="2023-10-02T19:23:33.538207864Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:23:33.538670 env[1206]: time="2023-10-02T19:23:33.538649493Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:23:33.538874 env[1206]: time="2023-10-02T19:23:33.538843338Z" level=info msg="Daemon has completed initialization" Oct 2 19:23:33.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:33.573097 systemd[1]: Started docker.service. Oct 2 19:23:33.584325 env[1206]: time="2023-10-02T19:23:33.584245368Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:23:33.615035 systemd[1]: Reloading. Oct 2 19:23:33.729579 /usr/lib/systemd/system-generators/torcx-generator[1348]: time="2023-10-02T19:23:33Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:23:33.729611 /usr/lib/systemd/system-generators/torcx-generator[1348]: time="2023-10-02T19:23:33Z" level=info msg="torcx already run" Oct 2 19:23:33.823190 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:23:33.823407 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:23:33.848843 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:23:33.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.911000 audit: BPF prog-id=34 op=LOAD Oct 2 19:23:33.911000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:23:33.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.912000 audit: BPF prog-id=35 op=LOAD Oct 2 19:23:33.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.912000 audit: BPF prog-id=36 op=LOAD Oct 2 19:23:33.912000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:23:33.912000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:23:33.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.915000 audit: BPF prog-id=37 op=LOAD Oct 2 19:23:33.915000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:23:33.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.916000 audit: BPF prog-id=38 op=LOAD Oct 2 19:23:33.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.916000 audit: BPF prog-id=39 op=LOAD Oct 2 19:23:33.916000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:23:33.916000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:23:33.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.917000 audit: BPF prog-id=40 op=LOAD Oct 2 19:23:33.917000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:23:33.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.919000 audit: BPF prog-id=41 op=LOAD Oct 2 19:23:33.919000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:23:33.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit: BPF prog-id=42 op=LOAD Oct 2 19:23:33.922000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit: BPF prog-id=43 op=LOAD Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.923000 audit: BPF prog-id=44 op=LOAD Oct 2 19:23:33.923000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:23:33.923000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:23:33.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.925000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.925000 audit: BPF prog-id=45 op=LOAD Oct 2 19:23:33.925000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:23:33.925000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.925000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.925000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.925000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.925000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.925000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.925000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.925000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit: BPF prog-id=46 op=LOAD Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit: BPF prog-id=47 op=LOAD Oct 2 19:23:33.926000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:23:33.926000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:23:33.926000 audit: BPF prog-id=48 op=LOAD Oct 2 19:23:33.927000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:23:33.937173 systemd[1]: Started kubelet.service. Oct 2 19:23:33.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:34.028123 kubelet[1391]: E1002 19:23:34.024449 1391 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:23:34.029000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:23:34.030132 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:23:34.030256 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:23:35.573480 env[1059]: time="2023-10-02T19:23:35.573215550Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 19:23:36.424723 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1271518747.mount: Deactivated successfully. Oct 2 19:23:39.330437 env[1059]: time="2023-10-02T19:23:39.330364251Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:39.337889 env[1059]: time="2023-10-02T19:23:39.337796354Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:39.341115 env[1059]: time="2023-10-02T19:23:39.341070227Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:39.343872 env[1059]: time="2023-10-02T19:23:39.343803013Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:39.345156 env[1059]: time="2023-10-02T19:23:39.345111737Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2\"" Oct 2 19:23:39.361390 env[1059]: time="2023-10-02T19:23:39.361329236Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 19:23:42.673572 env[1059]: time="2023-10-02T19:23:42.673483371Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:42.676578 env[1059]: time="2023-10-02T19:23:42.676529423Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:42.679739 env[1059]: time="2023-10-02T19:23:42.679691622Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:42.682565 env[1059]: time="2023-10-02T19:23:42.682524729Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:42.684463 env[1059]: time="2023-10-02T19:23:42.684398737Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c\"" Oct 2 19:23:42.697979 env[1059]: time="2023-10-02T19:23:42.697945549Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 19:23:44.291991 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:23:44.292258 kernel: audit: type=1130 audit(1696274624.280:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:44.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:44.281275 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:23:44.303285 kernel: audit: type=1131 audit(1696274624.280:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:44.280000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:44.281544 systemd[1]: Stopped kubelet.service. Oct 2 19:23:44.284146 systemd[1]: Started kubelet.service. Oct 2 19:23:44.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:44.311913 kernel: audit: type=1130 audit(1696274624.283:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:44.437826 kubelet[1420]: E1002 19:23:44.437776 1420 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:23:44.441802 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:23:44.441982 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:23:44.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:23:44.446876 kernel: audit: type=1131 audit(1696274624.441:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:23:44.900266 env[1059]: time="2023-10-02T19:23:44.900122856Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:44.908089 env[1059]: time="2023-10-02T19:23:44.907956083Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:44.911444 env[1059]: time="2023-10-02T19:23:44.911362737Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:44.915226 env[1059]: time="2023-10-02T19:23:44.915121301Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:44.916658 env[1059]: time="2023-10-02T19:23:44.916583572Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999\"" Oct 2 19:23:44.929325 env[1059]: time="2023-10-02T19:23:44.929247100Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 19:23:46.501706 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4167377436.mount: Deactivated successfully. Oct 2 19:23:47.509959 env[1059]: time="2023-10-02T19:23:47.509815363Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:47.517749 env[1059]: time="2023-10-02T19:23:47.517710747Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:47.520419 env[1059]: time="2023-10-02T19:23:47.520349537Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:47.524669 env[1059]: time="2023-10-02T19:23:47.524608124Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:47.526295 env[1059]: time="2023-10-02T19:23:47.526224492Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad\"" Oct 2 19:23:47.543150 env[1059]: time="2023-10-02T19:23:47.543075935Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:23:48.523626 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1986170471.mount: Deactivated successfully. Oct 2 19:23:48.536508 env[1059]: time="2023-10-02T19:23:48.536357916Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:48.539914 env[1059]: time="2023-10-02T19:23:48.539870846Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:48.543042 env[1059]: time="2023-10-02T19:23:48.542986752Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:48.545595 env[1059]: time="2023-10-02T19:23:48.545539834Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:48.546797 env[1059]: time="2023-10-02T19:23:48.546742779Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:23:48.562134 env[1059]: time="2023-10-02T19:23:48.562082474Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:23:49.544730 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2832536850.mount: Deactivated successfully. Oct 2 19:23:54.599339 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:23:54.610955 kernel: audit: type=1130 audit(1696274634.598:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:54.598000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:54.599589 systemd[1]: Stopped kubelet.service. Oct 2 19:23:54.601396 systemd[1]: Started kubelet.service. Oct 2 19:23:54.598000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:54.632499 kernel: audit: type=1131 audit(1696274634.598:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:54.632651 kernel: audit: type=1130 audit(1696274634.598:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:54.598000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:54.734467 kubelet[1442]: E1002 19:23:54.734383 1442 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:23:54.750029 kernel: audit: type=1131 audit(1696274634.736:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:23:54.736000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:23:54.737392 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:23:54.737542 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:23:56.564749 env[1059]: time="2023-10-02T19:23:56.564530455Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:56.571200 env[1059]: time="2023-10-02T19:23:56.571120139Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:56.576362 env[1059]: time="2023-10-02T19:23:56.576189026Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:56.581266 env[1059]: time="2023-10-02T19:23:56.581169482Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:56.584316 env[1059]: time="2023-10-02T19:23:56.584125212Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 19:23:56.623625 env[1059]: time="2023-10-02T19:23:56.623527491Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:23:57.399290 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2192438969.mount: Deactivated successfully. Oct 2 19:23:58.447673 env[1059]: time="2023-10-02T19:23:58.447635475Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:58.451772 env[1059]: time="2023-10-02T19:23:58.451749075Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:58.454483 env[1059]: time="2023-10-02T19:23:58.454462043Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:58.457002 env[1059]: time="2023-10-02T19:23:58.456976147Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:23:58.457823 env[1059]: time="2023-10-02T19:23:58.457798703Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:24:00.850538 update_engine[1053]: I1002 19:24:00.849996 1053 update_attempter.cc:505] Updating boot flags... Oct 2 19:24:02.496333 systemd[1]: Stopped kubelet.service. Oct 2 19:24:02.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:02.509000 kernel: audit: type=1130 audit(1696274642.496:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:02.509377 kernel: audit: type=1131 audit(1696274642.496:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:02.496000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:02.553062 systemd[1]: Reloading. Oct 2 19:24:02.644183 /usr/lib/systemd/system-generators/torcx-generator[1549]: time="2023-10-02T19:24:02Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:24:02.644216 /usr/lib/systemd/system-generators/torcx-generator[1549]: time="2023-10-02T19:24:02Z" level=info msg="torcx already run" Oct 2 19:24:02.744760 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:24:02.744787 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:24:02.773117 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:24:02.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.851372 kernel: audit: type=1400 audit(1696274642.843:394): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.851441 kernel: audit: type=1400 audit(1696274642.843:395): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.854953 kernel: audit: type=1400 audit(1696274642.850:396): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.858727 kernel: audit: type=1400 audit(1696274642.850:397): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.865951 kernel: audit: type=1400 audit(1696274642.850:398): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.866027 kernel: audit: type=1400 audit(1696274642.850:399): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.869619 kernel: audit: type=1400 audit(1696274642.850:400): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.869662 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:24:02.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.854000 audit: BPF prog-id=49 op=LOAD Oct 2 19:24:02.854000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:24:02.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.857000 audit: BPF prog-id=50 op=LOAD Oct 2 19:24:02.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.857000 audit: BPF prog-id=51 op=LOAD Oct 2 19:24:02.858000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:24:02.858000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:24:02.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.861000 audit: BPF prog-id=52 op=LOAD Oct 2 19:24:02.861000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:24:02.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.865000 audit: BPF prog-id=53 op=LOAD Oct 2 19:24:02.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.865000 audit: BPF prog-id=54 op=LOAD Oct 2 19:24:02.865000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:24:02.865000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:24:02.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.870000 audit: BPF prog-id=55 op=LOAD Oct 2 19:24:02.870000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:24:02.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.871000 audit: BPF prog-id=56 op=LOAD Oct 2 19:24:02.871000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:24:02.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit: BPF prog-id=57 op=LOAD Oct 2 19:24:02.873000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit: BPF prog-id=58 op=LOAD Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.873000 audit: BPF prog-id=59 op=LOAD Oct 2 19:24:02.873000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:24:02.873000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit: BPF prog-id=60 op=LOAD Oct 2 19:24:02.875000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit: BPF prog-id=61 op=LOAD Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.875000 audit: BPF prog-id=62 op=LOAD Oct 2 19:24:02.875000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:24:02.875000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:24:02.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:02.876000 audit: BPF prog-id=63 op=LOAD Oct 2 19:24:02.876000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:24:02.897000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:02.897483 systemd[1]: Started kubelet.service. Oct 2 19:24:02.966235 kubelet[1596]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:24:02.966235 kubelet[1596]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:24:02.966597 kubelet[1596]: I1002 19:24:02.966333 1596 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:24:02.968714 kubelet[1596]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:24:02.968790 kubelet[1596]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:24:03.906713 kubelet[1596]: I1002 19:24:03.906676 1596 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:24:03.906983 kubelet[1596]: I1002 19:24:03.906958 1596 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:24:03.907584 kubelet[1596]: I1002 19:24:03.907555 1596 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:24:03.913650 kubelet[1596]: E1002 19:24:03.913618 1596 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.120:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:03.913778 kubelet[1596]: I1002 19:24:03.913727 1596 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:24:03.921255 kubelet[1596]: I1002 19:24:03.921224 1596 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:24:03.921836 kubelet[1596]: I1002 19:24:03.921813 1596 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:24:03.922148 kubelet[1596]: I1002 19:24:03.922121 1596 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:24:03.922400 kubelet[1596]: I1002 19:24:03.922377 1596 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:24:03.922545 kubelet[1596]: I1002 19:24:03.922526 1596 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:24:03.922826 kubelet[1596]: I1002 19:24:03.922799 1596 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:24:03.927055 kubelet[1596]: I1002 19:24:03.927032 1596 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:24:03.927228 kubelet[1596]: I1002 19:24:03.927070 1596 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:24:03.927228 kubelet[1596]: I1002 19:24:03.927093 1596 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:24:03.927228 kubelet[1596]: I1002 19:24:03.927107 1596 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:24:03.934146 kubelet[1596]: W1002 19:24:03.934060 1596 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.24.4.120:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:03.934351 kubelet[1596]: E1002 19:24:03.934330 1596 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.120:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:03.935440 kubelet[1596]: I1002 19:24:03.935407 1596 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:24:03.935674 kubelet[1596]: W1002 19:24:03.935648 1596 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:24:03.936042 kubelet[1596]: I1002 19:24:03.936018 1596 server.go:1186] "Started kubelet" Oct 2 19:24:03.936141 kubelet[1596]: W1002 19:24:03.936095 1596 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.24.4.120:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-4-c08ee46f57.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:03.936141 kubelet[1596]: E1002 19:24:03.936128 1596 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.120:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-4-c08ee46f57.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:03.936000 audit[1596]: AVC avc: denied { mac_admin } for pid=1596 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:03.936000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:24:03.936000 audit[1596]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c7ec60 a1=c000b2cdc8 a2=c000c7ec30 a3=25 items=0 ppid=1 pid=1596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:03.936000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:24:03.936000 audit[1596]: AVC avc: denied { mac_admin } for pid=1596 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:03.936000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:24:03.936000 audit[1596]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000f28420 a1=c000b2cde0 a2=c000c7ecf0 a3=25 items=0 ppid=1 pid=1596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:03.936000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:24:03.939454 kubelet[1596]: I1002 19:24:03.937500 1596 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:24:03.939454 kubelet[1596]: I1002 19:24:03.937547 1596 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:24:03.939454 kubelet[1596]: I1002 19:24:03.937604 1596 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:24:03.939639 kubelet[1596]: E1002 19:24:03.938966 1596 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510-3-0-4-c08ee46f57.novalocal.178a60cd294eb0ce", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510-3-0-4-c08ee46f57.novalocal", UID:"ci-3510-3-0-4-c08ee46f57.novalocal", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510-3-0-4-c08ee46f57.novalocal"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 24, 3, 935998158, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 24, 3, 935998158, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.24.4.120:6443/api/v1/namespaces/default/events": dial tcp 172.24.4.120:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:24:03.940701 kubelet[1596]: I1002 19:24:03.940357 1596 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:24:03.940917 kubelet[1596]: I1002 19:24:03.940838 1596 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:24:03.941761 kubelet[1596]: I1002 19:24:03.941717 1596 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:24:03.944838 kubelet[1596]: I1002 19:24:03.944798 1596 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:24:03.948000 audit[1607]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1607 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:03.948000 audit[1607]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc362685f0 a2=0 a3=7ffc362685dc items=0 ppid=1596 pid=1607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:03.948000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:24:03.950363 kubelet[1596]: E1002 19:24:03.950079 1596 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:24:03.950363 kubelet[1596]: E1002 19:24:03.950102 1596 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:24:03.952000 audit[1608]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1608 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:03.952000 audit[1608]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd6f55a760 a2=0 a3=7ffd6f55a74c items=0 ppid=1596 pid=1608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:03.952000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:24:03.955104 kubelet[1596]: W1002 19:24:03.953338 1596 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.24.4.120:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:03.955104 kubelet[1596]: E1002 19:24:03.953393 1596 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.120:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:03.955104 kubelet[1596]: E1002 19:24:03.953464 1596 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://172.24.4.120:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-4-c08ee46f57.novalocal?timeout=10s": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:03.963000 audit[1611]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1611 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:03.963000 audit[1611]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd5bdfad00 a2=0 a3=7ffd5bdfacec items=0 ppid=1596 pid=1611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:03.963000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:24:03.967000 audit[1613]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1613 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:03.967000 audit[1613]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe4ddf3c00 a2=0 a3=7ffe4ddf3bec items=0 ppid=1596 pid=1613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:03.967000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:24:03.986000 audit[1618]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1618 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:03.986000 audit[1618]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffdb2e22340 a2=0 a3=7ffdb2e2232c items=0 ppid=1596 pid=1618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:03.986000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:24:03.988000 audit[1619]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=1619 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:03.988000 audit[1619]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe2df51290 a2=0 a3=7ffe2df5127c items=0 ppid=1596 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:03.988000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:24:03.996064 kubelet[1596]: I1002 19:24:03.996031 1596 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:24:03.996064 kubelet[1596]: I1002 19:24:03.996052 1596 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:24:03.996064 kubelet[1596]: I1002 19:24:03.996067 1596 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:24:03.998000 audit[1622]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=1622 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:03.998000 audit[1622]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc19ccff60 a2=0 a3=7ffc19ccff4c items=0 ppid=1596 pid=1622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:03.998000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:24:04.000001 kubelet[1596]: I1002 19:24:03.999981 1596 policy_none.go:49] "None policy: Start" Oct 2 19:24:04.000676 kubelet[1596]: I1002 19:24:04.000661 1596 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:24:04.000748 kubelet[1596]: I1002 19:24:04.000739 1596 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:24:04.003000 audit[1625]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=1625 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:04.003000 audit[1625]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffc536e6a30 a2=0 a3=7ffc536e6a1c items=0 ppid=1596 pid=1625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.003000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:24:04.008915 systemd[1]: Created slice kubepods.slice. Oct 2 19:24:04.011000 audit[1626]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1626 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:04.011000 audit[1626]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdca12a9b0 a2=0 a3=7ffdca12a99c items=0 ppid=1596 pid=1626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.011000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:24:04.013242 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:24:04.013000 audit[1627]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:04.013000 audit[1627]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcc1d54cf0 a2=0 a3=7ffcc1d54cdc items=0 ppid=1596 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.013000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:24:04.015000 audit[1629]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=1629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:04.015000 audit[1629]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc0af9bf20 a2=0 a3=7ffc0af9bf0c items=0 ppid=1596 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.015000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:24:04.017000 audit[1631]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=1631 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:04.017000 audit[1631]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffcd9739470 a2=0 a3=7ffcd973945c items=0 ppid=1596 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.017000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:24:04.019000 audit[1633]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:04.019000 audit[1633]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffd64a362c0 a2=0 a3=7ffd64a362ac items=0 ppid=1596 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.019000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:24:04.021000 audit[1635]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=1635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:04.021000 audit[1635]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffd63e3c3e0 a2=0 a3=7ffd63e3c3cc items=0 ppid=1596 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.021000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:24:04.023000 audit[1637]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=1637 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:04.023000 audit[1637]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7fff086ebb00 a2=0 a3=7fff086ebaec items=0 ppid=1596 pid=1637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.023000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:24:04.024942 kubelet[1596]: I1002 19:24:04.024920 1596 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:24:04.024000 audit[1638]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=1638 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:04.024000 audit[1638]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff800ea380 a2=0 a3=7fff800ea36c items=0 ppid=1596 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.024000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:24:04.025000 audit[1639]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=1639 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:04.025000 audit[1639]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcc7b1adc0 a2=0 a3=7ffcc7b1adac items=0 ppid=1596 pid=1639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.025000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:24:04.026000 audit[1640]: NETFILTER_CFG table=nat:43 family=10 entries=2 op=nft_register_chain pid=1640 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:04.026000 audit[1640]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff72e56650 a2=0 a3=7fff72e5663c items=0 ppid=1596 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.026000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:24:04.027000 audit[1641]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=1641 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:04.027000 audit[1641]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc9f5a7830 a2=0 a3=7ffc9f5a781c items=0 ppid=1596 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.027000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:24:04.029000 audit[1643]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=1643 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:04.029000 audit[1643]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffef60b2d30 a2=0 a3=7ffef60b2d1c items=0 ppid=1596 pid=1643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.029000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:24:04.033194 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:24:04.032000 audit[1644]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=1644 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:04.032000 audit[1644]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe482aa6a0 a2=0 a3=7ffe482aa68c items=0 ppid=1596 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.032000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:24:04.034000 audit[1645]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=1645 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:04.034000 audit[1645]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffd5ed4baf0 a2=0 a3=7ffd5ed4badc items=0 ppid=1596 pid=1645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.034000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:24:04.037000 audit[1647]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=1647 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:04.037000 audit[1647]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffc9d496f70 a2=0 a3=7ffc9d496f5c items=0 ppid=1596 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.037000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:24:04.039533 kubelet[1596]: I1002 19:24:04.039517 1596 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:24:04.038000 audit[1596]: AVC avc: denied { mac_admin } for pid=1596 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:04.038000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:24:04.038000 audit[1596]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e7f320 a1=c000a014b8 a2=c000e7f2f0 a3=25 items=0 ppid=1 pid=1596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.038000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:24:04.041415 kubelet[1596]: I1002 19:24:04.041402 1596 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:24:04.041685 kubelet[1596]: I1002 19:24:04.041673 1596 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:24:04.043028 kubelet[1596]: E1002 19:24:04.042836 1596 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:04.043990 kubelet[1596]: I1002 19:24:04.043978 1596 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:04.044505 kubelet[1596]: E1002 19:24:04.044482 1596 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.120:6443/api/v1/nodes\": dial tcp 172.24.4.120:6443: connect: connection refused" node="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:04.043000 audit[1648]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=1648 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:04.043000 audit[1648]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff026da3d0 a2=0 a3=7fff026da3bc items=0 ppid=1596 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.043000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:24:04.045000 audit[1649]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=1649 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:04.045000 audit[1649]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffceb406670 a2=0 a3=7ffceb40665c items=0 ppid=1596 pid=1649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.045000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:24:04.047000 audit[1651]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=1651 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:04.047000 audit[1651]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd928762e0 a2=0 a3=7ffd928762cc items=0 ppid=1596 pid=1651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.047000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:24:04.049000 audit[1653]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=1653 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:04.049000 audit[1653]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffe25f8e020 a2=0 a3=7ffe25f8e00c items=0 ppid=1596 pid=1653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.049000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:24:04.052000 audit[1655]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=1655 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:04.052000 audit[1655]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffcf403e890 a2=0 a3=7ffcf403e87c items=0 ppid=1596 pid=1655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.052000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:24:04.054000 audit[1657]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=1657 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:04.054000 audit[1657]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7fffc9270e30 a2=0 a3=7fffc9270e1c items=0 ppid=1596 pid=1657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.054000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:24:04.057000 audit[1659]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=1659 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:04.057000 audit[1659]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7ffc4f2d8860 a2=0 a3=7ffc4f2d884c items=0 ppid=1596 pid=1659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.057000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:24:04.058553 kubelet[1596]: I1002 19:24:04.058530 1596 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:24:04.058553 kubelet[1596]: I1002 19:24:04.058553 1596 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:24:04.058625 kubelet[1596]: I1002 19:24:04.058569 1596 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:24:04.058625 kubelet[1596]: E1002 19:24:04.058604 1596 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:24:04.059210 kubelet[1596]: W1002 19:24:04.059154 1596 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.24.4.120:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:04.059279 kubelet[1596]: E1002 19:24:04.059217 1596 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.120:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:04.059000 audit[1660]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=1660 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:04.059000 audit[1660]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc2db90cf0 a2=0 a3=7ffc2db90cdc items=0 ppid=1596 pid=1660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.059000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:24:04.060000 audit[1661]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=1661 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:04.060000 audit[1661]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffef6320a10 a2=0 a3=7ffef63209fc items=0 ppid=1596 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.060000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:24:04.061000 audit[1662]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=1662 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:04.061000 audit[1662]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe637af490 a2=0 a3=7ffe637af47c items=0 ppid=1596 pid=1662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:04.061000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:24:04.154367 kubelet[1596]: E1002 19:24:04.154270 1596 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://172.24.4.120:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-4-c08ee46f57.novalocal?timeout=10s": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:04.159823 kubelet[1596]: I1002 19:24:04.159634 1596 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:24:04.165221 kubelet[1596]: I1002 19:24:04.165184 1596 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:24:04.168433 kubelet[1596]: I1002 19:24:04.168399 1596 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:24:04.171707 kubelet[1596]: I1002 19:24:04.171650 1596 status_manager.go:698] "Failed to get status for pod" podUID=7dc97ca2c051821448c4cbc0a4cffc45 pod="kube-system/kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal" err="Get \"https://172.24.4.120:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal\": dial tcp 172.24.4.120:6443: connect: connection refused" Oct 2 19:24:04.176947 kubelet[1596]: I1002 19:24:04.176660 1596 status_manager.go:698] "Failed to get status for pod" podUID=26b8d62658e498c8bd97422797a21fb6 pod="kube-system/kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal" err="Get \"https://172.24.4.120:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal\": dial tcp 172.24.4.120:6443: connect: connection refused" Oct 2 19:24:04.177437 kubelet[1596]: I1002 19:24:04.177403 1596 status_manager.go:698] "Failed to get status for pod" podUID=9f55479c84c43cf6ce63c0afe77b2ef3 pod="kube-system/kube-scheduler-ci-3510-3-0-4-c08ee46f57.novalocal" err="Get \"https://172.24.4.120:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510-3-0-4-c08ee46f57.novalocal\": dial tcp 172.24.4.120:6443: connect: connection refused" Oct 2 19:24:04.182944 systemd[1]: Created slice kubepods-burstable-pod7dc97ca2c051821448c4cbc0a4cffc45.slice. Oct 2 19:24:04.202750 systemd[1]: Created slice kubepods-burstable-pod26b8d62658e498c8bd97422797a21fb6.slice. Oct 2 19:24:04.214057 systemd[1]: Created slice kubepods-burstable-pod9f55479c84c43cf6ce63c0afe77b2ef3.slice. Oct 2 19:24:04.248647 kubelet[1596]: I1002 19:24:04.248609 1596 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:04.249735 kubelet[1596]: E1002 19:24:04.249707 1596 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.120:6443/api/v1/nodes\": dial tcp 172.24.4.120:6443: connect: connection refused" node="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:04.343945 kubelet[1596]: I1002 19:24:04.343894 1596 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7dc97ca2c051821448c4cbc0a4cffc45-ca-certs\") pod \"kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"7dc97ca2c051821448c4cbc0a4cffc45\") " pod="kube-system/kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:04.344326 kubelet[1596]: I1002 19:24:04.344298 1596 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7dc97ca2c051821448c4cbc0a4cffc45-k8s-certs\") pod \"kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"7dc97ca2c051821448c4cbc0a4cffc45\") " pod="kube-system/kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:04.344572 kubelet[1596]: I1002 19:24:04.344547 1596 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/26b8d62658e498c8bd97422797a21fb6-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"26b8d62658e498c8bd97422797a21fb6\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:04.344823 kubelet[1596]: I1002 19:24:04.344797 1596 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/26b8d62658e498c8bd97422797a21fb6-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"26b8d62658e498c8bd97422797a21fb6\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:04.345131 kubelet[1596]: I1002 19:24:04.345105 1596 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7dc97ca2c051821448c4cbc0a4cffc45-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"7dc97ca2c051821448c4cbc0a4cffc45\") " pod="kube-system/kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:04.345365 kubelet[1596]: I1002 19:24:04.345341 1596 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/26b8d62658e498c8bd97422797a21fb6-ca-certs\") pod \"kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"26b8d62658e498c8bd97422797a21fb6\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:04.345596 kubelet[1596]: I1002 19:24:04.345573 1596 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/26b8d62658e498c8bd97422797a21fb6-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"26b8d62658e498c8bd97422797a21fb6\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:04.345824 kubelet[1596]: I1002 19:24:04.345799 1596 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/26b8d62658e498c8bd97422797a21fb6-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"26b8d62658e498c8bd97422797a21fb6\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:04.346112 kubelet[1596]: I1002 19:24:04.346086 1596 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9f55479c84c43cf6ce63c0afe77b2ef3-kubeconfig\") pod \"kube-scheduler-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"9f55479c84c43cf6ce63c0afe77b2ef3\") " pod="kube-system/kube-scheduler-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:04.499485 env[1059]: time="2023-10-02T19:24:04.498135915Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal,Uid:7dc97ca2c051821448c4cbc0a4cffc45,Namespace:kube-system,Attempt:0,}" Oct 2 19:24:04.513514 env[1059]: time="2023-10-02T19:24:04.513428596Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal,Uid:26b8d62658e498c8bd97422797a21fb6,Namespace:kube-system,Attempt:0,}" Oct 2 19:24:04.519937 env[1059]: time="2023-10-02T19:24:04.519827705Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-0-4-c08ee46f57.novalocal,Uid:9f55479c84c43cf6ce63c0afe77b2ef3,Namespace:kube-system,Attempt:0,}" Oct 2 19:24:04.555655 kubelet[1596]: E1002 19:24:04.555552 1596 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://172.24.4.120:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-4-c08ee46f57.novalocal?timeout=10s": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:04.653934 kubelet[1596]: I1002 19:24:04.653646 1596 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:04.654394 kubelet[1596]: E1002 19:24:04.654348 1596 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.120:6443/api/v1/nodes\": dial tcp 172.24.4.120:6443: connect: connection refused" node="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:04.920674 kubelet[1596]: W1002 19:24:04.920500 1596 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.24.4.120:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-4-c08ee46f57.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:04.920674 kubelet[1596]: E1002 19:24:04.920658 1596 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.120:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-4-c08ee46f57.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:05.123120 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3590998134.mount: Deactivated successfully. Oct 2 19:24:05.135831 env[1059]: time="2023-10-02T19:24:05.135686286Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:05.143994 env[1059]: time="2023-10-02T19:24:05.143922696Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:05.146244 env[1059]: time="2023-10-02T19:24:05.146192563Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:05.152218 env[1059]: time="2023-10-02T19:24:05.152166811Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:05.154106 env[1059]: time="2023-10-02T19:24:05.154057375Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:05.158042 env[1059]: time="2023-10-02T19:24:05.157988283Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:05.165576 env[1059]: time="2023-10-02T19:24:05.165525516Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:05.168980 env[1059]: time="2023-10-02T19:24:05.168926850Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:05.188392 env[1059]: time="2023-10-02T19:24:05.187202269Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:05.192887 env[1059]: time="2023-10-02T19:24:05.192827189Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:05.194667 env[1059]: time="2023-10-02T19:24:05.194629159Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:05.195900 env[1059]: time="2023-10-02T19:24:05.195878765Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:05.213112 env[1059]: time="2023-10-02T19:24:05.207911947Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:24:05.213112 env[1059]: time="2023-10-02T19:24:05.208008048Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:24:05.213112 env[1059]: time="2023-10-02T19:24:05.208023954Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:24:05.213112 env[1059]: time="2023-10-02T19:24:05.208190389Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bcfe36e2b27e89bf445481e8f65c0f4e1d79e44a9f436a03b83171226f9a5b8b pid=1671 runtime=io.containerd.runc.v2 Oct 2 19:24:05.246392 systemd[1]: Started cri-containerd-bcfe36e2b27e89bf445481e8f65c0f4e1d79e44a9f436a03b83171226f9a5b8b.scope. Oct 2 19:24:05.259192 env[1059]: time="2023-10-02T19:24:05.259101543Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:24:05.259324 env[1059]: time="2023-10-02T19:24:05.259194698Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:24:05.259324 env[1059]: time="2023-10-02T19:24:05.259253737Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:24:05.259504 env[1059]: time="2023-10-02T19:24:05.259441610Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8a0886bb4332be9b74a32e38a9c4b56b1e93d075ff36c7f0132a1bc21e5a5fbb pid=1698 runtime=io.containerd.runc.v2 Oct 2 19:24:05.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.261000 audit: BPF prog-id=64 op=LOAD Oct 2 19:24:05.263000 audit[1682]: AVC avc: denied { bpf } for pid=1682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.263000 audit[1682]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1671 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263666533366532623237653839626634343534383165386636356330 Oct 2 19:24:05.263000 audit[1682]: AVC avc: denied { perfmon } for pid=1682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.263000 audit[1682]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1671 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263666533366532623237653839626634343534383165386636356330 Oct 2 19:24:05.263000 audit[1682]: AVC avc: denied { bpf } for pid=1682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.263000 audit[1682]: AVC avc: denied { bpf } for pid=1682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.263000 audit[1682]: AVC avc: denied { bpf } for pid=1682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.263000 audit[1682]: AVC avc: denied { perfmon } for pid=1682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.263000 audit[1682]: AVC avc: denied { perfmon } for pid=1682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.263000 audit[1682]: AVC avc: denied { perfmon } for pid=1682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.263000 audit[1682]: AVC avc: denied { perfmon } for pid=1682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.263000 audit[1682]: AVC avc: denied { perfmon } for pid=1682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.263000 audit[1682]: AVC avc: denied { bpf } for pid=1682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.263000 audit[1682]: AVC avc: denied { bpf } for pid=1682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.263000 audit: BPF prog-id=65 op=LOAD Oct 2 19:24:05.263000 audit[1682]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00020e370 items=0 ppid=1671 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263666533366532623237653839626634343534383165386636356330 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { bpf } for pid=1682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { bpf } for pid=1682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { perfmon } for pid=1682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { perfmon } for pid=1682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { perfmon } for pid=1682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { perfmon } for pid=1682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { perfmon } for pid=1682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { bpf } for pid=1682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { bpf } for pid=1682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit: BPF prog-id=66 op=LOAD Oct 2 19:24:05.264000 audit[1682]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00020e3b8 items=0 ppid=1671 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263666533366532623237653839626634343534383165386636356330 Oct 2 19:24:05.264000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:24:05.264000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { bpf } for pid=1682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { bpf } for pid=1682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { bpf } for pid=1682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { perfmon } for pid=1682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { perfmon } for pid=1682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { perfmon } for pid=1682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { perfmon } for pid=1682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { perfmon } for pid=1682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { bpf } for pid=1682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit[1682]: AVC avc: denied { bpf } for pid=1682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.264000 audit: BPF prog-id=67 op=LOAD Oct 2 19:24:05.264000 audit[1682]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00020e7c8 items=0 ppid=1671 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263666533366532623237653839626634343534383165386636356330 Oct 2 19:24:05.270882 env[1059]: time="2023-10-02T19:24:05.269541013Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:24:05.270882 env[1059]: time="2023-10-02T19:24:05.269626060Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:24:05.270882 env[1059]: time="2023-10-02T19:24:05.269657199Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:24:05.270882 env[1059]: time="2023-10-02T19:24:05.269805785Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9001588443b03cf870cd064b9c2bbaa3a9c82c33bcd640c859aa53c975dcbdda pid=1722 runtime=io.containerd.runc.v2 Oct 2 19:24:05.297962 kubelet[1596]: W1002 19:24:05.297593 1596 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.24.4.120:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:05.297962 kubelet[1596]: E1002 19:24:05.297640 1596 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.120:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:05.300666 systemd[1]: Started cri-containerd-8a0886bb4332be9b74a32e38a9c4b56b1e93d075ff36c7f0132a1bc21e5a5fbb.scope. Oct 2 19:24:05.312790 systemd[1]: Started cri-containerd-9001588443b03cf870cd064b9c2bbaa3a9c82c33bcd640c859aa53c975dcbdda.scope. Oct 2 19:24:05.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.318000 audit: BPF prog-id=68 op=LOAD Oct 2 19:24:05.321000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.321000 audit[1721]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1698 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861303838366262343333326265396237346133326533386139633462 Oct 2 19:24:05.326000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.326000 audit[1721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1698 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861303838366262343333326265396237346133326533386139633462 Oct 2 19:24:05.326000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.326000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.326000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.326000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.326000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.326000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.326000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.326000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.326000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.326000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.326000 audit: BPF prog-id=69 op=LOAD Oct 2 19:24:05.326000 audit[1721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000395700 items=0 ppid=1698 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.326000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861303838366262343333326265396237346133326533386139633462 Oct 2 19:24:05.328000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.328000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.328000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.328000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.328000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.328000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.328000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.328000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.328000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.328000 audit: BPF prog-id=70 op=LOAD Oct 2 19:24:05.328000 audit[1721]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000395748 items=0 ppid=1698 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861303838366262343333326265396237346133326533386139633462 Oct 2 19:24:05.329000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:24:05.329000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:24:05.329000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.329000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.331996 env[1059]: time="2023-10-02T19:24:05.331951135Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal,Uid:7dc97ca2c051821448c4cbc0a4cffc45,Namespace:kube-system,Attempt:0,} returns sandbox id \"bcfe36e2b27e89bf445481e8f65c0f4e1d79e44a9f436a03b83171226f9a5b8b\"" Oct 2 19:24:05.329000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.329000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.329000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.329000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.329000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.329000 audit[1721]: AVC avc: denied { perfmon } for pid=1721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.329000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.329000 audit[1721]: AVC avc: denied { bpf } for pid=1721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.329000 audit: BPF prog-id=71 op=LOAD Oct 2 19:24:05.329000 audit[1721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000395b58 items=0 ppid=1698 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861303838366262343333326265396237346133326533386139633462 Oct 2 19:24:05.342294 env[1059]: time="2023-10-02T19:24:05.342239353Z" level=info msg="CreateContainer within sandbox \"bcfe36e2b27e89bf445481e8f65c0f4e1d79e44a9f436a03b83171226f9a5b8b\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:24:05.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.346000 audit: BPF prog-id=72 op=LOAD Oct 2 19:24:05.348000 audit[1737]: AVC avc: denied { bpf } for pid=1737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.348000 audit[1737]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1722 pid=1737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930303135383834343362303363663837306364303634623963326262 Oct 2 19:24:05.348000 audit[1737]: AVC avc: denied { perfmon } for pid=1737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.348000 audit[1737]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1722 pid=1737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930303135383834343362303363663837306364303634623963326262 Oct 2 19:24:05.349000 audit[1737]: AVC avc: denied { bpf } for pid=1737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.349000 audit[1737]: AVC avc: denied { bpf } for pid=1737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.349000 audit[1737]: AVC avc: denied { bpf } for pid=1737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.349000 audit[1737]: AVC avc: denied { perfmon } for pid=1737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.349000 audit[1737]: AVC avc: denied { perfmon } for pid=1737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.349000 audit[1737]: AVC avc: denied { perfmon } for pid=1737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.349000 audit[1737]: AVC avc: denied { perfmon } for pid=1737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.349000 audit[1737]: AVC avc: denied { perfmon } for pid=1737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.349000 audit[1737]: AVC avc: denied { bpf } for pid=1737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.349000 audit[1737]: AVC avc: denied { bpf } for pid=1737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.349000 audit: BPF prog-id=73 op=LOAD Oct 2 19:24:05.349000 audit[1737]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000214220 items=0 ppid=1722 pid=1737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.349000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930303135383834343362303363663837306364303634623963326262 Oct 2 19:24:05.350000 audit[1737]: AVC avc: denied { bpf } for pid=1737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.350000 audit[1737]: AVC avc: denied { bpf } for pid=1737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.350000 audit[1737]: AVC avc: denied { perfmon } for pid=1737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.350000 audit[1737]: AVC avc: denied { perfmon } for pid=1737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.350000 audit[1737]: AVC avc: denied { perfmon } for pid=1737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.350000 audit[1737]: AVC avc: denied { perfmon } for pid=1737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.350000 audit[1737]: AVC avc: denied { perfmon } for pid=1737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.350000 audit[1737]: AVC avc: denied { bpf } for pid=1737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.350000 audit[1737]: AVC avc: denied { bpf } for pid=1737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.350000 audit: BPF prog-id=74 op=LOAD Oct 2 19:24:05.350000 audit[1737]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000214268 items=0 ppid=1722 pid=1737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.350000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930303135383834343362303363663837306364303634623963326262 Oct 2 19:24:05.351000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:24:05.351000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:24:05.352000 audit[1737]: AVC avc: denied { bpf } for pid=1737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.352000 audit[1737]: AVC avc: denied { bpf } for pid=1737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.352000 audit[1737]: AVC avc: denied { bpf } for pid=1737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.352000 audit[1737]: AVC avc: denied { perfmon } for pid=1737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.352000 audit[1737]: AVC avc: denied { perfmon } for pid=1737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.352000 audit[1737]: AVC avc: denied { perfmon } for pid=1737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.352000 audit[1737]: AVC avc: denied { perfmon } for pid=1737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.352000 audit[1737]: AVC avc: denied { perfmon } for pid=1737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.352000 audit[1737]: AVC avc: denied { bpf } for pid=1737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.352000 audit[1737]: AVC avc: denied { bpf } for pid=1737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.352000 audit: BPF prog-id=75 op=LOAD Oct 2 19:24:05.352000 audit[1737]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000214678 items=0 ppid=1722 pid=1737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930303135383834343362303363663837306364303634623963326262 Oct 2 19:24:05.357316 kubelet[1596]: E1002 19:24:05.356742 1596 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://172.24.4.120:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-4-c08ee46f57.novalocal?timeout=10s": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:05.375073 env[1059]: time="2023-10-02T19:24:05.375022672Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-0-4-c08ee46f57.novalocal,Uid:9f55479c84c43cf6ce63c0afe77b2ef3,Namespace:kube-system,Attempt:0,} returns sandbox id \"8a0886bb4332be9b74a32e38a9c4b56b1e93d075ff36c7f0132a1bc21e5a5fbb\"" Oct 2 19:24:05.378015 env[1059]: time="2023-10-02T19:24:05.377910006Z" level=info msg="CreateContainer within sandbox \"8a0886bb4332be9b74a32e38a9c4b56b1e93d075ff36c7f0132a1bc21e5a5fbb\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:24:05.395733 env[1059]: time="2023-10-02T19:24:05.395697202Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal,Uid:26b8d62658e498c8bd97422797a21fb6,Namespace:kube-system,Attempt:0,} returns sandbox id \"9001588443b03cf870cd064b9c2bbaa3a9c82c33bcd640c859aa53c975dcbdda\"" Oct 2 19:24:05.400275 env[1059]: time="2023-10-02T19:24:05.400241008Z" level=info msg="CreateContainer within sandbox \"9001588443b03cf870cd064b9c2bbaa3a9c82c33bcd640c859aa53c975dcbdda\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:24:05.428500 env[1059]: time="2023-10-02T19:24:05.428460318Z" level=info msg="CreateContainer within sandbox \"bcfe36e2b27e89bf445481e8f65c0f4e1d79e44a9f436a03b83171226f9a5b8b\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"76928040f0d4b0b2890297620094720b30e2eb492095cfab13219b5edfd09bbf\"" Oct 2 19:24:05.429283 env[1059]: time="2023-10-02T19:24:05.429244260Z" level=info msg="StartContainer for \"76928040f0d4b0b2890297620094720b30e2eb492095cfab13219b5edfd09bbf\"" Oct 2 19:24:05.446277 env[1059]: time="2023-10-02T19:24:05.441259934Z" level=info msg="CreateContainer within sandbox \"9001588443b03cf870cd064b9c2bbaa3a9c82c33bcd640c859aa53c975dcbdda\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"5fcb340aaae65fc16f4f684b520ac3b5001de1ce5704c1cfc10a750dc124ff15\"" Oct 2 19:24:05.446277 env[1059]: time="2023-10-02T19:24:05.444698690Z" level=info msg="CreateContainer within sandbox \"8a0886bb4332be9b74a32e38a9c4b56b1e93d075ff36c7f0132a1bc21e5a5fbb\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"2a95b03d866da2d6c4d60ae5d1cc993c37c3878316d2d03aef9683df8960a62a\"" Oct 2 19:24:05.446421 kubelet[1596]: W1002 19:24:05.444564 1596 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.24.4.120:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:05.446421 kubelet[1596]: E1002 19:24:05.444610 1596 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.120:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:05.446737 env[1059]: time="2023-10-02T19:24:05.446714590Z" level=info msg="StartContainer for \"2a95b03d866da2d6c4d60ae5d1cc993c37c3878316d2d03aef9683df8960a62a\"" Oct 2 19:24:05.446988 env[1059]: time="2023-10-02T19:24:05.446779613Z" level=info msg="StartContainer for \"5fcb340aaae65fc16f4f684b520ac3b5001de1ce5704c1cfc10a750dc124ff15\"" Oct 2 19:24:05.456877 kubelet[1596]: I1002 19:24:05.456822 1596 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:05.457219 kubelet[1596]: E1002 19:24:05.457199 1596 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.120:6443/api/v1/nodes\": dial tcp 172.24.4.120:6443: connect: connection refused" node="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:05.460500 systemd[1]: Started cri-containerd-76928040f0d4b0b2890297620094720b30e2eb492095cfab13219b5edfd09bbf.scope. Oct 2 19:24:05.469719 kubelet[1596]: W1002 19:24:05.469686 1596 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.24.4.120:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:05.469844 kubelet[1596]: E1002 19:24:05.469726 1596 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.120:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:05.475212 systemd[1]: Started cri-containerd-5fcb340aaae65fc16f4f684b520ac3b5001de1ce5704c1cfc10a750dc124ff15.scope. Oct 2 19:24:05.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.491000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.491000 audit: BPF prog-id=76 op=LOAD Oct 2 19:24:05.493000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.493000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1671 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736393238303430663064346230623238393032393736323030393437 Oct 2 19:24:05.493000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.493000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1671 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736393238303430663064346230623238393032393736323030393437 Oct 2 19:24:05.493000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.493000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.493000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.493000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.493000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.493000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.493000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.493000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.493000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.493000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.493000 audit: BPF prog-id=77 op=LOAD Oct 2 19:24:05.493000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003bc6c0 items=0 ppid=1671 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736393238303430663064346230623238393032393736323030393437 Oct 2 19:24:05.494000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.494000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.494000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.494000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.494000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.494000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.494000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.494000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.494000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.494000 audit: BPF prog-id=78 op=LOAD Oct 2 19:24:05.494000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003bc708 items=0 ppid=1671 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736393238303430663064346230623238393032393736323030393437 Oct 2 19:24:05.495000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:24:05.495000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:24:05.495000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.495000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.495000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.495000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.495000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.495000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.495000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.495000 audit[1798]: AVC avc: denied { perfmon } for pid=1798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.495000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.495000 audit[1798]: AVC avc: denied { bpf } for pid=1798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.495000 audit: BPF prog-id=79 op=LOAD Oct 2 19:24:05.495000 audit[1798]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003bcb18 items=0 ppid=1671 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736393238303430663064346230623238393032393736323030393437 Oct 2 19:24:05.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.499000 audit: BPF prog-id=80 op=LOAD Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1722 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566636233343061616165363566633136663466363834623532306163 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1722 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566636233343061616165363566633136663466363834623532306163 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit: BPF prog-id=81 op=LOAD Oct 2 19:24:05.500000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000215720 items=0 ppid=1722 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566636233343061616165363566633136663466363834623532306163 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit: BPF prog-id=82 op=LOAD Oct 2 19:24:05.500000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000215768 items=0 ppid=1722 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566636233343061616165363566633136663466363834623532306163 Oct 2 19:24:05.500000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:24:05.500000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.500000 audit: BPF prog-id=83 op=LOAD Oct 2 19:24:05.500000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000215b78 items=0 ppid=1722 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566636233343061616165363566633136663466363834623532306163 Oct 2 19:24:05.514623 systemd[1]: Started cri-containerd-2a95b03d866da2d6c4d60ae5d1cc993c37c3878316d2d03aef9683df8960a62a.scope. Oct 2 19:24:05.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.547000 audit: BPF prog-id=84 op=LOAD Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1698 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261393562303364383636646132643663346436306165356431636339 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1698 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261393562303364383636646132643663346436306165356431636339 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit: BPF prog-id=85 op=LOAD Oct 2 19:24:05.548000 audit[1826]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001179d8 a2=78 a3=c0001a09f0 items=0 ppid=1698 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261393562303364383636646132643663346436306165356431636339 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit: BPF prog-id=86 op=LOAD Oct 2 19:24:05.548000 audit[1826]: SYSCALL arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c000117770 a2=78 a3=c0001a0a38 items=0 ppid=1698 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261393562303364383636646132643663346436306165356431636339 Oct 2 19:24:05.548000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:24:05.548000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:05.548000 audit: BPF prog-id=87 op=LOAD Oct 2 19:24:05.548000 audit[1826]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117c30 a2=78 a3=c0001a0e48 items=0 ppid=1698 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:05.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261393562303364383636646132643663346436306165356431636339 Oct 2 19:24:05.572650 env[1059]: time="2023-10-02T19:24:05.572569337Z" level=info msg="StartContainer for \"76928040f0d4b0b2890297620094720b30e2eb492095cfab13219b5edfd09bbf\" returns successfully" Oct 2 19:24:05.573424 env[1059]: time="2023-10-02T19:24:05.573384999Z" level=info msg="StartContainer for \"5fcb340aaae65fc16f4f684b520ac3b5001de1ce5704c1cfc10a750dc124ff15\" returns successfully" Oct 2 19:24:05.599072 env[1059]: time="2023-10-02T19:24:05.599004616Z" level=info msg="StartContainer for \"2a95b03d866da2d6c4d60ae5d1cc993c37c3878316d2d03aef9683df8960a62a\" returns successfully" Oct 2 19:24:05.599938 kubelet[1596]: E1002 19:24:05.599783 1596 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510-3-0-4-c08ee46f57.novalocal.178a60cd294eb0ce", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510-3-0-4-c08ee46f57.novalocal", UID:"ci-3510-3-0-4-c08ee46f57.novalocal", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510-3-0-4-c08ee46f57.novalocal"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 24, 3, 935998158, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 24, 3, 935998158, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.24.4.120:6443/api/v1/namespaces/default/events": dial tcp 172.24.4.120:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:24:06.066390 kubelet[1596]: I1002 19:24:06.066360 1596 status_manager.go:698] "Failed to get status for pod" podUID=9f55479c84c43cf6ce63c0afe77b2ef3 pod="kube-system/kube-scheduler-ci-3510-3-0-4-c08ee46f57.novalocal" err="Get \"https://172.24.4.120:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510-3-0-4-c08ee46f57.novalocal\": dial tcp 172.24.4.120:6443: connect: connection refused" Oct 2 19:24:06.068924 kubelet[1596]: I1002 19:24:06.068902 1596 status_manager.go:698] "Failed to get status for pod" podUID=7dc97ca2c051821448c4cbc0a4cffc45 pod="kube-system/kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal" err="Get \"https://172.24.4.120:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal\": dial tcp 172.24.4.120:6443: connect: connection refused" Oct 2 19:24:06.078378 kubelet[1596]: E1002 19:24:06.078349 1596 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.120:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:06.128774 kubelet[1596]: I1002 19:24:06.128742 1596 status_manager.go:698] "Failed to get status for pod" podUID=26b8d62658e498c8bd97422797a21fb6 pod="kube-system/kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal" err="Get \"https://172.24.4.120:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal\": dial tcp 172.24.4.120:6443: connect: connection refused" Oct 2 19:24:06.943821 kubelet[1596]: W1002 19:24:06.943765 1596 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.24.4.120:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-4-c08ee46f57.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:06.943821 kubelet[1596]: E1002 19:24:06.943825 1596 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.120:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-4-c08ee46f57.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:06.957152 kubelet[1596]: E1002 19:24:06.957123 1596 controller.go:146] failed to ensure lease exists, will retry in 3.2s, error: Get "https://172.24.4.120:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-4-c08ee46f57.novalocal?timeout=10s": dial tcp 172.24.4.120:6443: connect: connection refused Oct 2 19:24:07.059123 kubelet[1596]: I1002 19:24:07.059095 1596 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:07.689902 kernel: kauditd_printk_skb: 620 callbacks suppressed Oct 2 19:24:07.690068 kernel: audit: type=1400 audit(1696274647.685:710): avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525624 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:07.685000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525624 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:07.685000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00048cf60 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:24:07.698220 kernel: audit: type=1300 audit(1696274647.685:710): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00048cf60 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:24:07.685000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:07.685000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:07.710601 kernel: audit: type=1327 audit(1696274647.685:710): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:07.710654 kernel: audit: type=1400 audit(1696274647.685:711): avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:07.710680 kernel: audit: type=1300 audit(1696274647.685:711): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0002c1860 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:24:07.685000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0002c1860 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:24:07.685000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:07.721378 kernel: audit: type=1327 audit(1696274647.685:711): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:09.444000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525624 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:09.444000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c00727c000 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:24:09.455918 kernel: audit: type=1400 audit(1696274649.444:712): avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525624 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:09.456040 kernel: audit: type=1300 audit(1696274649.444:712): arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c00727c000 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:24:09.456104 kernel: audit: type=1327 audit(1696274649.444:712): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:24:09.444000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:24:09.462662 kernel: audit: type=1400 audit(1696274649.445:713): avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:09.445000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:09.445000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c0028c0080 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:24:09.445000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:24:09.461000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525620 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:09.461000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c00b969710 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:24:09.461000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:24:09.470000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525626 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:09.470000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00727c120 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:24:09.470000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:24:09.506000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:09.506000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0028c1c20 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:24:09.506000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:24:09.507000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525624 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:09.507000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00727da70 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:24:09.507000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:24:09.943314 kubelet[1596]: I1002 19:24:09.943279 1596 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:09.993727 kubelet[1596]: E1002 19:24:09.993698 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:10.094972 kubelet[1596]: E1002 19:24:10.094925 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:10.195507 kubelet[1596]: E1002 19:24:10.195333 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:10.296463 kubelet[1596]: E1002 19:24:10.296383 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:10.396544 kubelet[1596]: E1002 19:24:10.396474 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:10.497068 kubelet[1596]: E1002 19:24:10.496919 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:10.597833 kubelet[1596]: E1002 19:24:10.597767 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:10.698260 kubelet[1596]: E1002 19:24:10.698164 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:10.799042 kubelet[1596]: E1002 19:24:10.798933 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:10.899786 kubelet[1596]: E1002 19:24:10.899758 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:11.001143 kubelet[1596]: E1002 19:24:11.001062 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:11.101745 kubelet[1596]: E1002 19:24:11.101708 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:11.202684 kubelet[1596]: E1002 19:24:11.202628 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:11.303818 kubelet[1596]: E1002 19:24:11.303768 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:11.404832 kubelet[1596]: E1002 19:24:11.404625 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:11.505651 kubelet[1596]: E1002 19:24:11.505557 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:11.606378 kubelet[1596]: E1002 19:24:11.606321 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:11.707353 kubelet[1596]: E1002 19:24:11.707208 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:11.808225 kubelet[1596]: E1002 19:24:11.808060 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:11.908587 kubelet[1596]: E1002 19:24:11.908519 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:12.009773 kubelet[1596]: E1002 19:24:12.009618 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:12.111274 kubelet[1596]: E1002 19:24:12.111190 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:12.212310 kubelet[1596]: E1002 19:24:12.212241 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:12.313304 kubelet[1596]: E1002 19:24:12.313140 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:12.413671 kubelet[1596]: E1002 19:24:12.413618 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:12.514340 kubelet[1596]: E1002 19:24:12.514293 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:12.614916 kubelet[1596]: E1002 19:24:12.614881 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:12.715715 kubelet[1596]: E1002 19:24:12.715653 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:12.816815 kubelet[1596]: E1002 19:24:12.816748 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:12.917542 kubelet[1596]: E1002 19:24:12.917390 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:12.936000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=525651 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:24:12.940436 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:24:12.940583 kernel: audit: type=1400 audit(1696274652.936:718): avc: denied { watch } for pid=1844 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=525651 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:24:12.936000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00110e680 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:24:12.965538 kernel: audit: type=1300 audit(1696274652.936:718): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00110e680 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:24:12.936000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:12.979039 kernel: audit: type=1327 audit(1696274652.936:718): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:13.019042 kubelet[1596]: E1002 19:24:13.018988 1596 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-4-c08ee46f57.novalocal\" not found" Oct 2 19:24:13.115000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:13.126924 kernel: audit: type=1400 audit(1696274653.115:719): avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:13.115000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001152020 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:24:13.147118 kernel: audit: type=1300 audit(1696274653.115:719): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001152020 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:24:13.115000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:13.115000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:13.168147 kernel: audit: type=1327 audit(1696274653.115:719): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:13.168274 kernel: audit: type=1400 audit(1696274653.115:720): avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:13.168334 kernel: audit: type=1300 audit(1696274653.115:720): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001152160 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:24:13.115000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001152160 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:24:13.115000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:13.121000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:13.196408 kernel: audit: type=1327 audit(1696274653.115:720): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:13.196469 kernel: audit: type=1400 audit(1696274653.121:721): avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:13.121000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0011522a0 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:24:13.121000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:13.121000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:24:13.121000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0011f9020 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:24:13.121000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:24:13.515530 systemd[1]: Reloading. Oct 2 19:24:13.614281 /usr/lib/systemd/system-generators/torcx-generator[1917]: time="2023-10-02T19:24:13Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:24:13.614312 /usr/lib/systemd/system-generators/torcx-generator[1917]: time="2023-10-02T19:24:13Z" level=info msg="torcx already run" Oct 2 19:24:13.730829 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:24:13.730902 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:24:13.760663 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:24:13.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit: BPF prog-id=88 op=LOAD Oct 2 19:24:13.867000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit: BPF prog-id=89 op=LOAD Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit: BPF prog-id=90 op=LOAD Oct 2 19:24:13.867000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:24:13.867000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.868000 audit: BPF prog-id=91 op=LOAD Oct 2 19:24:13.868000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:24:13.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.868000 audit: BPF prog-id=92 op=LOAD Oct 2 19:24:13.868000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:24:13.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.869000 audit: BPF prog-id=93 op=LOAD Oct 2 19:24:13.869000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:24:13.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.871000 audit: BPF prog-id=94 op=LOAD Oct 2 19:24:13.871000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:24:13.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.871000 audit: BPF prog-id=95 op=LOAD Oct 2 19:24:13.871000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:24:13.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit: BPF prog-id=96 op=LOAD Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit: BPF prog-id=97 op=LOAD Oct 2 19:24:13.872000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:24:13.872000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.872000 audit: BPF prog-id=98 op=LOAD Oct 2 19:24:13.873000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:24:13.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.874000 audit: BPF prog-id=99 op=LOAD Oct 2 19:24:13.874000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:24:13.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit: BPF prog-id=100 op=LOAD Oct 2 19:24:13.877000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit: BPF prog-id=101 op=LOAD Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.877000 audit: BPF prog-id=102 op=LOAD Oct 2 19:24:13.877000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:24:13.877000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:24:13.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.878000 audit: BPF prog-id=103 op=LOAD Oct 2 19:24:13.878000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:24:13.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.879000 audit: BPF prog-id=104 op=LOAD Oct 2 19:24:13.879000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit: BPF prog-id=105 op=LOAD Oct 2 19:24:13.880000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit: BPF prog-id=106 op=LOAD Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.880000 audit: BPF prog-id=107 op=LOAD Oct 2 19:24:13.880000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:24:13.880000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:24:13.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:13.881000 audit: BPF prog-id=108 op=LOAD Oct 2 19:24:13.881000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:24:13.901396 systemd[1]: Stopping kubelet.service... Oct 2 19:24:13.920123 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:24:13.920333 systemd[1]: Stopped kubelet.service. Oct 2 19:24:13.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:13.920388 systemd[1]: kubelet.service: Consumed 1.469s CPU time. Oct 2 19:24:13.922060 systemd[1]: Started kubelet.service. Oct 2 19:24:13.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:14.024226 kubelet[1964]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:24:14.024226 kubelet[1964]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:24:14.025047 kubelet[1964]: I1002 19:24:14.024988 1964 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:24:14.026889 kubelet[1964]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:24:14.026974 kubelet[1964]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:24:14.035715 kubelet[1964]: I1002 19:24:14.035677 1964 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:24:14.035962 kubelet[1964]: I1002 19:24:14.035949 1964 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:24:14.036331 kubelet[1964]: I1002 19:24:14.036318 1964 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:24:14.037979 kubelet[1964]: I1002 19:24:14.037964 1964 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:24:14.041227 kubelet[1964]: I1002 19:24:14.041201 1964 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:24:14.042473 kubelet[1964]: I1002 19:24:14.042458 1964 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:24:14.042773 kubelet[1964]: I1002 19:24:14.042762 1964 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:24:14.042958 kubelet[1964]: I1002 19:24:14.042945 1964 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:24:14.043117 kubelet[1964]: I1002 19:24:14.043105 1964 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:24:14.043185 kubelet[1964]: I1002 19:24:14.043177 1964 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:24:14.043277 kubelet[1964]: I1002 19:24:14.043267 1964 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:24:14.047363 kubelet[1964]: I1002 19:24:14.047328 1964 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:24:14.047363 kubelet[1964]: I1002 19:24:14.047361 1964 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:24:14.047523 kubelet[1964]: I1002 19:24:14.047388 1964 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:24:14.047523 kubelet[1964]: I1002 19:24:14.047404 1964 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:24:14.047985 kubelet[1964]: I1002 19:24:14.047970 1964 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:24:14.048649 kubelet[1964]: I1002 19:24:14.048615 1964 server.go:1186] "Started kubelet" Oct 2 19:24:14.050000 audit[1964]: AVC avc: denied { mac_admin } for pid=1964 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:14.050000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:24:14.050000 audit[1964]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00097b620 a1=c000a6f560 a2=c00097b5f0 a3=25 items=0 ppid=1 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:14.050000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:24:14.052168 kubelet[1964]: I1002 19:24:14.052152 1964 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:24:14.051000 audit[1964]: AVC avc: denied { mac_admin } for pid=1964 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:14.051000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:24:14.051000 audit[1964]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00092ca40 a1=c000a6f578 a2=c00097b6b0 a3=25 items=0 ppid=1 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:14.051000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:24:14.052494 kubelet[1964]: I1002 19:24:14.052483 1964 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:24:14.052596 kubelet[1964]: I1002 19:24:14.052584 1964 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:24:14.056989 kubelet[1964]: I1002 19:24:14.056972 1964 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:24:14.059750 kubelet[1964]: I1002 19:24:14.059733 1964 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:24:14.067973 kubelet[1964]: I1002 19:24:14.067944 1964 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:24:14.069685 kubelet[1964]: I1002 19:24:14.069667 1964 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:24:14.077948 kubelet[1964]: E1002 19:24:14.077919 1964 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:24:14.078203 kubelet[1964]: E1002 19:24:14.078166 1964 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:24:14.124424 kubelet[1964]: I1002 19:24:14.124335 1964 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:24:14.153380 kubelet[1964]: I1002 19:24:14.153357 1964 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:24:14.153567 kubelet[1964]: I1002 19:24:14.153557 1964 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:24:14.153635 kubelet[1964]: I1002 19:24:14.153627 1964 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:24:14.153736 kubelet[1964]: E1002 19:24:14.153725 1964 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:24:14.185982 kubelet[1964]: I1002 19:24:14.185935 1964 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:14.203743 kubelet[1964]: I1002 19:24:14.203708 1964 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:14.206275 kubelet[1964]: I1002 19:24:14.203799 1964 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:14.245392 kubelet[1964]: I1002 19:24:14.245362 1964 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:24:14.245529 kubelet[1964]: I1002 19:24:14.245519 1964 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:24:14.245613 kubelet[1964]: I1002 19:24:14.245604 1964 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:24:14.245848 kubelet[1964]: I1002 19:24:14.245826 1964 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:24:14.245958 kubelet[1964]: I1002 19:24:14.245948 1964 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:24:14.246041 kubelet[1964]: I1002 19:24:14.246032 1964 policy_none.go:49] "None policy: Start" Oct 2 19:24:14.246684 kubelet[1964]: I1002 19:24:14.246672 1964 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:24:14.246778 kubelet[1964]: I1002 19:24:14.246768 1964 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:24:14.247023 kubelet[1964]: I1002 19:24:14.247011 1964 state_mem.go:75] "Updated machine memory state" Oct 2 19:24:14.252837 kubelet[1964]: I1002 19:24:14.252821 1964 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:24:14.252000 audit[1964]: AVC avc: denied { mac_admin } for pid=1964 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:14.252000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:24:14.252000 audit[1964]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c001451ad0 a1=c0014bec00 a2=c001451aa0 a3=25 items=0 ppid=1 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:14.252000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:24:14.253266 kubelet[1964]: I1002 19:24:14.253251 1964 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:24:14.254022 kubelet[1964]: I1002 19:24:14.254008 1964 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:24:14.255243 kubelet[1964]: I1002 19:24:14.255230 1964 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:24:14.255370 kubelet[1964]: I1002 19:24:14.255358 1964 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:24:14.268007 kubelet[1964]: I1002 19:24:14.267941 1964 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:24:14.271343 kubelet[1964]: I1002 19:24:14.271209 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/26b8d62658e498c8bd97422797a21fb6-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"26b8d62658e498c8bd97422797a21fb6\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:14.271571 kubelet[1964]: I1002 19:24:14.271547 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/26b8d62658e498c8bd97422797a21fb6-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"26b8d62658e498c8bd97422797a21fb6\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:14.271755 kubelet[1964]: I1002 19:24:14.271708 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7dc97ca2c051821448c4cbc0a4cffc45-k8s-certs\") pod \"kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"7dc97ca2c051821448c4cbc0a4cffc45\") " pod="kube-system/kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:14.271925 kubelet[1964]: I1002 19:24:14.271914 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9f55479c84c43cf6ce63c0afe77b2ef3-kubeconfig\") pod \"kube-scheduler-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"9f55479c84c43cf6ce63c0afe77b2ef3\") " pod="kube-system/kube-scheduler-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:14.272075 kubelet[1964]: I1002 19:24:14.272064 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7dc97ca2c051821448c4cbc0a4cffc45-ca-certs\") pod \"kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"7dc97ca2c051821448c4cbc0a4cffc45\") " pod="kube-system/kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:14.272271 kubelet[1964]: I1002 19:24:14.272260 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7dc97ca2c051821448c4cbc0a4cffc45-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"7dc97ca2c051821448c4cbc0a4cffc45\") " pod="kube-system/kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:14.272425 kubelet[1964]: I1002 19:24:14.272395 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/26b8d62658e498c8bd97422797a21fb6-ca-certs\") pod \"kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"26b8d62658e498c8bd97422797a21fb6\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:14.272549 kubelet[1964]: I1002 19:24:14.272539 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/26b8d62658e498c8bd97422797a21fb6-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"26b8d62658e498c8bd97422797a21fb6\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:14.272680 kubelet[1964]: I1002 19:24:14.272670 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/26b8d62658e498c8bd97422797a21fb6-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal\" (UID: \"26b8d62658e498c8bd97422797a21fb6\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:15.060611 kubelet[1964]: I1002 19:24:15.060556 1964 apiserver.go:52] "Watching apiserver" Oct 2 19:24:15.069918 kubelet[1964]: I1002 19:24:15.069896 1964 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:24:15.080274 kubelet[1964]: I1002 19:24:15.080251 1964 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:24:15.473661 kubelet[1964]: E1002 19:24:15.473597 1964 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal\" already exists" pod="kube-system/kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:15.669207 kubelet[1964]: E1002 19:24:15.669170 1964 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal\" already exists" pod="kube-system/kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:15.895881 kubelet[1964]: E1002 19:24:15.895840 1964 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510-3-0-4-c08ee46f57.novalocal\" already exists" pod="kube-system/kube-scheduler-ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:24:16.066954 kubelet[1964]: I1002 19:24:16.066906 1964 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510-3-0-4-c08ee46f57.novalocal" podStartSLOduration=2.066053782 pod.CreationTimestamp="2023-10-02 19:24:14 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:24:16.06284244 +0000 UTC m=+2.127540325" watchObservedRunningTime="2023-10-02 19:24:16.066053782 +0000 UTC m=+2.130751647" Oct 2 19:24:17.261334 kubelet[1964]: I1002 19:24:17.261280 1964 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510-3-0-4-c08ee46f57.novalocal" podStartSLOduration=3.261230448 pod.CreationTimestamp="2023-10-02 19:24:14 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:24:17.261205737 +0000 UTC m=+3.325903642" watchObservedRunningTime="2023-10-02 19:24:17.261230448 +0000 UTC m=+3.325928313" Oct 2 19:24:18.078019 kubelet[1964]: I1002 19:24:18.077965 1964 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510-3-0-4-c08ee46f57.novalocal" podStartSLOduration=4.077877826 pod.CreationTimestamp="2023-10-02 19:24:14 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:24:17.737425084 +0000 UTC m=+3.802122949" watchObservedRunningTime="2023-10-02 19:24:18.077877826 +0000 UTC m=+4.142575741" Oct 2 19:24:19.068814 sudo[1190]: pam_unix(sudo:session): session closed for user root Oct 2 19:24:19.068000 audit[1190]: USER_END pid=1190 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:24:19.070514 kernel: kauditd_printk_skb: 263 callbacks suppressed Oct 2 19:24:19.070574 kernel: audit: type=1106 audit(1696274659.068:972): pid=1190 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:24:19.068000 audit[1190]: CRED_DISP pid=1190 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:24:19.088429 kernel: audit: type=1104 audit(1696274659.068:973): pid=1190 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:24:19.361198 sshd[1186]: pam_unix(sshd:session): session closed for user core Oct 2 19:24:19.362000 audit[1186]: USER_END pid=1186 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:24:19.386941 kernel: audit: type=1106 audit(1696274659.362:974): pid=1186 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:24:19.362000 audit[1186]: CRED_DISP pid=1186 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:24:19.397955 kernel: audit: type=1104 audit(1696274659.362:975): pid=1186 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:24:19.398373 systemd[1]: sshd@6-172.24.4.120:22-172.24.4.1:41468.service: Deactivated successfully. Oct 2 19:24:19.401643 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:24:19.402112 systemd[1]: session-7.scope: Consumed 6.171s CPU time. Oct 2 19:24:19.403780 systemd-logind[1052]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:24:19.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.120:22-172.24.4.1:41468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:19.416235 kernel: audit: type=1131 audit(1696274659.398:976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.120:22-172.24.4.1:41468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:24:19.417202 systemd-logind[1052]: Removed session 7. Oct 2 19:24:25.436451 kubelet[1964]: I1002 19:24:25.436422 1964 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:24:25.442318 env[1059]: time="2023-10-02T19:24:25.442277959Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:24:25.442925 kubelet[1964]: I1002 19:24:25.442903 1964 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:24:25.820308 kubelet[1964]: I1002 19:24:25.820089 1964 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:24:25.838618 systemd[1]: Created slice kubepods-besteffort-pod546af110_6031_4520_ac9c_abff6920ecee.slice. Oct 2 19:24:25.857684 kubelet[1964]: I1002 19:24:25.857624 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/546af110-6031-4520-ac9c-abff6920ecee-xtables-lock\") pod \"kube-proxy-t8mw8\" (UID: \"546af110-6031-4520-ac9c-abff6920ecee\") " pod="kube-system/kube-proxy-t8mw8" Oct 2 19:24:25.858116 kubelet[1964]: I1002 19:24:25.858093 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rcj58\" (UniqueName: \"kubernetes.io/projected/546af110-6031-4520-ac9c-abff6920ecee-kube-api-access-rcj58\") pod \"kube-proxy-t8mw8\" (UID: \"546af110-6031-4520-ac9c-abff6920ecee\") " pod="kube-system/kube-proxy-t8mw8" Oct 2 19:24:25.858551 kubelet[1964]: I1002 19:24:25.858530 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/546af110-6031-4520-ac9c-abff6920ecee-kube-proxy\") pod \"kube-proxy-t8mw8\" (UID: \"546af110-6031-4520-ac9c-abff6920ecee\") " pod="kube-system/kube-proxy-t8mw8" Oct 2 19:24:25.858898 kubelet[1964]: I1002 19:24:25.858750 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/546af110-6031-4520-ac9c-abff6920ecee-lib-modules\") pod \"kube-proxy-t8mw8\" (UID: \"546af110-6031-4520-ac9c-abff6920ecee\") " pod="kube-system/kube-proxy-t8mw8" Oct 2 19:24:26.152766 env[1059]: time="2023-10-02T19:24:26.152643743Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-t8mw8,Uid:546af110-6031-4520-ac9c-abff6920ecee,Namespace:kube-system,Attempt:0,}" Oct 2 19:24:26.198987 env[1059]: time="2023-10-02T19:24:26.198800180Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:24:26.198987 env[1059]: time="2023-10-02T19:24:26.198902687Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:24:26.199388 env[1059]: time="2023-10-02T19:24:26.199290824Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:24:26.200149 env[1059]: time="2023-10-02T19:24:26.199806749Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dc0471a423247f81b26df82d15be5818147adc2b50628c200dc31711def4d924 pid=2072 runtime=io.containerd.runc.v2 Oct 2 19:24:26.251909 systemd[1]: run-containerd-runc-k8s.io-dc0471a423247f81b26df82d15be5818147adc2b50628c200dc31711def4d924-runc.rpmji5.mount: Deactivated successfully. Oct 2 19:24:26.255818 systemd[1]: Started cri-containerd-dc0471a423247f81b26df82d15be5818147adc2b50628c200dc31711def4d924.scope. Oct 2 19:24:26.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.278663 kernel: audit: type=1400 audit(1696274666.270:977): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.278718 kernel: audit: type=1400 audit(1696274666.270:978): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.286884 kernel: audit: type=1400 audit(1696274666.270:979): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.297252 kernel: audit: type=1400 audit(1696274666.270:980): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.297317 kernel: audit: type=1400 audit(1696274666.270:981): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.299061 kubelet[1964]: I1002 19:24:26.299025 1964 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:24:26.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.307487 systemd[1]: Created slice kubepods-besteffort-podd8e949d9_2c8e_46b4_9049_704ddd91cdbc.slice. Oct 2 19:24:26.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.314028 kernel: audit: type=1400 audit(1696274666.270:982): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.314102 kernel: audit: type=1400 audit(1696274666.270:983): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.324751 kernel: audit: type=1400 audit(1696274666.270:984): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.324898 kernel: audit: type=1400 audit(1696274666.270:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.329903 kernel: audit: type=1400 audit(1696274666.276:986): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.276000 audit: BPF prog-id=109 op=LOAD Oct 2 19:24:26.277000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.277000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2072 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463303437316134323332343766383162323664663832643135626535 Oct 2 19:24:26.277000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.277000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2072 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463303437316134323332343766383162323664663832643135626535 Oct 2 19:24:26.277000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.277000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.277000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.277000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.277000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.277000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.277000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.277000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.277000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.277000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.277000 audit: BPF prog-id=110 op=LOAD Oct 2 19:24:26.277000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0002b3090 items=0 ppid=2072 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463303437316134323332343766383162323664663832643135626535 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit: BPF prog-id=111 op=LOAD Oct 2 19:24:26.279000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0002b30d8 items=0 ppid=2072 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463303437316134323332343766383162323664663832643135626535 Oct 2 19:24:26.279000 audit: BPF prog-id=111 op=UNLOAD Oct 2 19:24:26.279000 audit: BPF prog-id=110 op=UNLOAD Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { perfmon } for pid=2082 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit[2082]: AVC avc: denied { bpf } for pid=2082 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.279000 audit: BPF prog-id=112 op=LOAD Oct 2 19:24:26.279000 audit[2082]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0002b34e8 items=0 ppid=2072 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463303437316134323332343766383162323664663832643135626535 Oct 2 19:24:26.333190 env[1059]: time="2023-10-02T19:24:26.333144920Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-t8mw8,Uid:546af110-6031-4520-ac9c-abff6920ecee,Namespace:kube-system,Attempt:0,} returns sandbox id \"dc0471a423247f81b26df82d15be5818147adc2b50628c200dc31711def4d924\"" Oct 2 19:24:26.336498 env[1059]: time="2023-10-02T19:24:26.336442935Z" level=info msg="CreateContainer within sandbox \"dc0471a423247f81b26df82d15be5818147adc2b50628c200dc31711def4d924\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:24:26.359657 env[1059]: time="2023-10-02T19:24:26.359603064Z" level=info msg="CreateContainer within sandbox \"dc0471a423247f81b26df82d15be5818147adc2b50628c200dc31711def4d924\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"dab03508decf60e9756703f123b1a782b4d20077afc37a51f769a408426a2e31\"" Oct 2 19:24:26.360344 env[1059]: time="2023-10-02T19:24:26.360315007Z" level=info msg="StartContainer for \"dab03508decf60e9756703f123b1a782b4d20077afc37a51f769a408426a2e31\"" Oct 2 19:24:26.362556 kubelet[1964]: I1002 19:24:26.362365 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fhd82\" (UniqueName: \"kubernetes.io/projected/d8e949d9-2c8e-46b4-9049-704ddd91cdbc-kube-api-access-fhd82\") pod \"tigera-operator-54b47459dd-wtmqt\" (UID: \"d8e949d9-2c8e-46b4-9049-704ddd91cdbc\") " pod="tigera-operator/tigera-operator-54b47459dd-wtmqt" Oct 2 19:24:26.362556 kubelet[1964]: I1002 19:24:26.362434 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/d8e949d9-2c8e-46b4-9049-704ddd91cdbc-var-lib-calico\") pod \"tigera-operator-54b47459dd-wtmqt\" (UID: \"d8e949d9-2c8e-46b4-9049-704ddd91cdbc\") " pod="tigera-operator/tigera-operator-54b47459dd-wtmqt" Oct 2 19:24:26.380448 systemd[1]: Started cri-containerd-dab03508decf60e9756703f123b1a782b4d20077afc37a51f769a408426a2e31.scope. Oct 2 19:24:26.406000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.406000 audit[2112]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2072 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461623033353038646563663630653937353637303366313233623161 Oct 2 19:24:26.406000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.406000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.406000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.406000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.406000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.406000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.406000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.406000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.406000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.406000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.406000 audit: BPF prog-id=113 op=LOAD Oct 2 19:24:26.406000 audit[2112]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000259be0 items=0 ppid=2072 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461623033353038646563663630653937353637303366313233623161 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit: BPF prog-id=114 op=LOAD Oct 2 19:24:26.407000 audit[2112]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000259c28 items=0 ppid=2072 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461623033353038646563663630653937353637303366313233623161 Oct 2 19:24:26.407000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:24:26.407000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { perfmon } for pid=2112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit[2112]: AVC avc: denied { bpf } for pid=2112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.407000 audit: BPF prog-id=115 op=LOAD Oct 2 19:24:26.407000 audit[2112]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000259cb8 items=0 ppid=2072 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461623033353038646563663630653937353637303366313233623161 Oct 2 19:24:26.435561 env[1059]: time="2023-10-02T19:24:26.435501961Z" level=info msg="StartContainer for \"dab03508decf60e9756703f123b1a782b4d20077afc37a51f769a408426a2e31\" returns successfully" Oct 2 19:24:26.617459 env[1059]: time="2023-10-02T19:24:26.617389418Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-54b47459dd-wtmqt,Uid:d8e949d9-2c8e-46b4-9049-704ddd91cdbc,Namespace:tigera-operator,Attempt:0,}" Oct 2 19:24:26.651547 env[1059]: time="2023-10-02T19:24:26.651449018Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:24:26.651808 env[1059]: time="2023-10-02T19:24:26.651517748Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:24:26.651963 env[1059]: time="2023-10-02T19:24:26.651787313Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:24:26.652654 env[1059]: time="2023-10-02T19:24:26.652301115Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7d910a6a19bbcd2c3da21a24c7694855a4e935d63fb5eadf10ec3a53165314f5 pid=2150 runtime=io.containerd.runc.v2 Oct 2 19:24:26.674223 systemd[1]: Started cri-containerd-7d910a6a19bbcd2c3da21a24c7694855a4e935d63fb5eadf10ec3a53165314f5.scope. Oct 2 19:24:26.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.699000 audit: BPF prog-id=116 op=LOAD Oct 2 19:24:26.701000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.701000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2150 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764393130613661313962626364326333646132316132346337363934 Oct 2 19:24:26.701000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.701000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2150 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764393130613661313962626364326333646132316132346337363934 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit: BPF prog-id=117 op=LOAD Oct 2 19:24:26.702000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00009cba0 items=0 ppid=2150 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764393130613661313962626364326333646132316132346337363934 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit: BPF prog-id=118 op=LOAD Oct 2 19:24:26.702000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00009cbe8 items=0 ppid=2150 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764393130613661313962626364326333646132316132346337363934 Oct 2 19:24:26.702000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:24:26.702000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:26.702000 audit: BPF prog-id=119 op=LOAD Oct 2 19:24:26.702000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00009cff8 items=0 ppid=2150 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764393130613661313962626364326333646132316132346337363934 Oct 2 19:24:26.751680 env[1059]: time="2023-10-02T19:24:26.751619988Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-54b47459dd-wtmqt,Uid:d8e949d9-2c8e-46b4-9049-704ddd91cdbc,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"7d910a6a19bbcd2c3da21a24c7694855a4e935d63fb5eadf10ec3a53165314f5\"" Oct 2 19:24:26.756400 env[1059]: time="2023-10-02T19:24:26.756361457Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\"" Oct 2 19:24:26.889000 audit[2206]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:26.889000 audit[2206]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffd87ffde0 a2=0 a3=7fffd87ffdcc items=0 ppid=2123 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.889000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:24:26.890000 audit[2207]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_chain pid=2207 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:26.890000 audit[2207]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc147097a0 a2=0 a3=7ffc1470978c items=0 ppid=2123 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.890000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:24:26.891000 audit[2208]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:26.891000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff41276140 a2=0 a3=7fff4127612c items=0 ppid=2123 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.891000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:24:26.893000 audit[2209]: NETFILTER_CFG table=mangle:62 family=10 entries=1 op=nft_register_chain pid=2209 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:26.893000 audit[2209]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcf7611650 a2=0 a3=7ffcf761163c items=0 ppid=2123 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.893000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:24:26.897000 audit[2210]: NETFILTER_CFG table=nat:63 family=10 entries=1 op=nft_register_chain pid=2210 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:26.897000 audit[2210]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc76b82930 a2=0 a3=7ffc76b8291c items=0 ppid=2123 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.897000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:24:26.903000 audit[2211]: NETFILTER_CFG table=filter:64 family=10 entries=1 op=nft_register_chain pid=2211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:26.903000 audit[2211]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe8b0ed9b0 a2=0 a3=7ffe8b0ed99c items=0 ppid=2123 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:26.903000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:24:27.003000 audit[2212]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=2212 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.003000 audit[2212]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd0c648cd0 a2=0 a3=7ffd0c648cbc items=0 ppid=2123 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.003000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:24:27.015000 audit[2214]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=2214 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.015000 audit[2214]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffee99735d0 a2=0 a3=7ffee99735bc items=0 ppid=2123 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.015000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:24:27.024000 audit[2217]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=2217 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.024000 audit[2217]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffdd44775c0 a2=0 a3=7ffdd44775ac items=0 ppid=2123 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.024000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:24:27.028000 audit[2218]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2218 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.028000 audit[2218]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc5346d060 a2=0 a3=7ffc5346d04c items=0 ppid=2123 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.028000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:24:27.038000 audit[2220]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2220 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.038000 audit[2220]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffc6b24b20 a2=0 a3=7fffc6b24b0c items=0 ppid=2123 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.038000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:24:27.040000 audit[2221]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.040000 audit[2221]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff799c700 a2=0 a3=7ffff799c6ec items=0 ppid=2123 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.040000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:24:27.047000 audit[2223]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2223 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.047000 audit[2223]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd9dd20f40 a2=0 a3=7ffd9dd20f2c items=0 ppid=2123 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.047000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:24:27.058000 audit[2226]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2226 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.058000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd7d05f930 a2=0 a3=7ffd7d05f91c items=0 ppid=2123 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.058000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:24:27.061000 audit[2227]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.061000 audit[2227]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffccf450c90 a2=0 a3=7ffccf450c7c items=0 ppid=2123 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.061000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:24:27.066000 audit[2229]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2229 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.066000 audit[2229]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc4071ea50 a2=0 a3=7ffc4071ea3c items=0 ppid=2123 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.066000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:24:27.072000 audit[2230]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=2230 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.072000 audit[2230]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdb420ec20 a2=0 a3=7ffdb420ec0c items=0 ppid=2123 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.072000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:24:27.077000 audit[2232]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2232 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.077000 audit[2232]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeaa1beaa0 a2=0 a3=7ffeaa1bea8c items=0 ppid=2123 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.077000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:24:27.084000 audit[2235]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2235 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.084000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffea085f710 a2=0 a3=7ffea085f6fc items=0 ppid=2123 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.084000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:24:27.091000 audit[2238]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2238 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.091000 audit[2238]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdcfb63850 a2=0 a3=7ffdcfb6383c items=0 ppid=2123 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.091000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:24:27.092000 audit[2239]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.092000 audit[2239]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd47651760 a2=0 a3=7ffd4765174c items=0 ppid=2123 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.092000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:24:27.097000 audit[2241]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=2241 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.097000 audit[2241]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffd755fe540 a2=0 a3=7ffd755fe52c items=0 ppid=2123 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.097000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:24:27.105000 audit[2244]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=2244 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:24:27.105000 audit[2244]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffff2cf0bc0 a2=0 a3=7ffff2cf0bac items=0 ppid=2123 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.105000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:24:27.139000 audit[2248]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=2248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:24:27.139000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffd0614ae40 a2=0 a3=7ffd0614ae2c items=0 ppid=2123 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.139000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:24:27.154000 audit[2248]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=2248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:24:27.154000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffd0614ae40 a2=0 a3=7ffd0614ae2c items=0 ppid=2123 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.154000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:24:27.230000 audit[2278]: NETFILTER_CFG table=filter:84 family=2 entries=12 op=nft_register_rule pid=2278 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:24:27.230000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffc99587aa0 a2=0 a3=7ffc99587a8c items=0 ppid=2123 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.230000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:24:27.231000 audit[2278]: NETFILTER_CFG table=nat:85 family=2 entries=20 op=nft_register_rule pid=2278 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:24:27.231000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffc99587aa0 a2=0 a3=7ffc99587a8c items=0 ppid=2123 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.231000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:24:27.235000 audit[2279]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_chain pid=2279 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.235000 audit[2279]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe07fadcb0 a2=0 a3=7ffe07fadc9c items=0 ppid=2123 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.235000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:24:27.238000 audit[2281]: NETFILTER_CFG table=filter:87 family=10 entries=2 op=nft_register_chain pid=2281 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.238000 audit[2281]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc88fefaf0 a2=0 a3=7ffc88fefadc items=0 ppid=2123 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.238000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:24:27.242000 audit[2284]: NETFILTER_CFG table=filter:88 family=10 entries=2 op=nft_register_chain pid=2284 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.242000 audit[2284]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd724536d0 a2=0 a3=7ffd724536bc items=0 ppid=2123 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.242000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:24:27.243000 audit[2285]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=2285 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.243000 audit[2285]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc54a697c0 a2=0 a3=7ffc54a697ac items=0 ppid=2123 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.243000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:24:27.246488 kubelet[1964]: I1002 19:24:27.246339 1964 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-t8mw8" podStartSLOduration=2.246302161 pod.CreationTimestamp="2023-10-02 19:24:25 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:24:27.242100801 +0000 UTC m=+13.306798676" watchObservedRunningTime="2023-10-02 19:24:27.246302161 +0000 UTC m=+13.311000036" Oct 2 19:24:27.251000 audit[2287]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2287 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.251000 audit[2287]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdb8665ef0 a2=0 a3=7ffdb8665edc items=0 ppid=2123 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.251000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:24:27.255000 audit[2288]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.255000 audit[2288]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffebadb8440 a2=0 a3=7ffebadb842c items=0 ppid=2123 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.255000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:24:27.258000 audit[2290]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_rule pid=2290 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.258000 audit[2290]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffec20f9240 a2=0 a3=7ffec20f922c items=0 ppid=2123 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.258000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:24:27.263000 audit[2293]: NETFILTER_CFG table=filter:93 family=10 entries=2 op=nft_register_chain pid=2293 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.263000 audit[2293]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fff6f1c42a0 a2=0 a3=7fff6f1c428c items=0 ppid=2123 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.263000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:24:27.265000 audit[2294]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=2294 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.265000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd592cae00 a2=0 a3=7ffd592cadec items=0 ppid=2123 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.265000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:24:27.267000 audit[2296]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=2296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.267000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe02d908f0 a2=0 a3=7ffe02d908dc items=0 ppid=2123 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.267000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:24:27.269000 audit[2297]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_chain pid=2297 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.269000 audit[2297]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe96ebd110 a2=0 a3=7ffe96ebd0fc items=0 ppid=2123 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.269000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:24:27.272000 audit[2299]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2299 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.272000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe242a9dd0 a2=0 a3=7ffe242a9dbc items=0 ppid=2123 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.272000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:24:27.275000 audit[2302]: NETFILTER_CFG table=filter:98 family=10 entries=1 op=nft_register_rule pid=2302 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.275000 audit[2302]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc184ab220 a2=0 a3=7ffc184ab20c items=0 ppid=2123 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.275000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:24:27.279000 audit[2305]: NETFILTER_CFG table=filter:99 family=10 entries=1 op=nft_register_rule pid=2305 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.279000 audit[2305]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdb108cba0 a2=0 a3=7ffdb108cb8c items=0 ppid=2123 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.279000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:24:27.280000 audit[2306]: NETFILTER_CFG table=nat:100 family=10 entries=1 op=nft_register_chain pid=2306 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.280000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc6dd2e070 a2=0 a3=7ffc6dd2e05c items=0 ppid=2123 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.280000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:24:27.282000 audit[2308]: NETFILTER_CFG table=nat:101 family=10 entries=2 op=nft_register_chain pid=2308 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.282000 audit[2308]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffd809509a0 a2=0 a3=7ffd8095098c items=0 ppid=2123 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.282000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:24:27.285000 audit[2311]: NETFILTER_CFG table=nat:102 family=10 entries=2 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:24:27.285000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffeefceecf0 a2=0 a3=7ffeefceecdc items=0 ppid=2123 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.285000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:24:27.292000 audit[2315]: NETFILTER_CFG table=filter:103 family=10 entries=3 op=nft_register_rule pid=2315 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:24:27.292000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7fff896965c0 a2=0 a3=7fff896965ac items=0 ppid=2123 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.292000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:24:27.292000 audit[2315]: NETFILTER_CFG table=nat:104 family=10 entries=10 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:24:27.292000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7fff896965c0 a2=0 a3=7fff896965ac items=0 ppid=2123 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:27.292000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:24:31.420875 env[1059]: time="2023-10-02T19:24:31.420746639Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:31.424103 env[1059]: time="2023-10-02T19:24:31.424007725Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:31.428457 env[1059]: time="2023-10-02T19:24:31.428421549Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.29.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:31.434470 env[1059]: time="2023-10-02T19:24:31.434365047Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:89eef35e1bbe8c88792ce69c3f3f38fb9838e58602c570524350b5f3ab127582,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:31.437938 env[1059]: time="2023-10-02T19:24:31.437822067Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.29.0\" returns image reference \"sha256:343ea4f89a32c8f197173c5d9f1ad64eb033df452c5b89a65877d8d3cfa692b1\"" Oct 2 19:24:31.445905 env[1059]: time="2023-10-02T19:24:31.445841829Z" level=info msg="CreateContainer within sandbox \"7d910a6a19bbcd2c3da21a24c7694855a4e935d63fb5eadf10ec3a53165314f5\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Oct 2 19:24:31.472609 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4161195891.mount: Deactivated successfully. Oct 2 19:24:31.479318 env[1059]: time="2023-10-02T19:24:31.479205613Z" level=info msg="CreateContainer within sandbox \"7d910a6a19bbcd2c3da21a24c7694855a4e935d63fb5eadf10ec3a53165314f5\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"3545132630987ef9804362396a12e99bd8566e0bad8142772cb9a06450df02c8\"" Oct 2 19:24:31.482533 env[1059]: time="2023-10-02T19:24:31.482427751Z" level=info msg="StartContainer for \"3545132630987ef9804362396a12e99bd8566e0bad8142772cb9a06450df02c8\"" Oct 2 19:24:31.514596 systemd[1]: Started cri-containerd-3545132630987ef9804362396a12e99bd8566e0bad8142772cb9a06450df02c8.scope. Oct 2 19:24:31.549234 kernel: kauditd_printk_skb: 285 callbacks suppressed Oct 2 19:24:31.549358 kernel: audit: type=1400 audit(1696274671.539:1065): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.549400 kernel: audit: type=1400 audit(1696274671.539:1066): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.556716 kernel: audit: type=1400 audit(1696274671.539:1067): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.556786 kernel: audit: type=1400 audit(1696274671.539:1068): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.556817 kernel: audit: type=1400 audit(1696274671.539:1069): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.563424 kernel: audit: type=1400 audit(1696274671.539:1070): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.563456 kernel: audit: type=1400 audit(1696274671.539:1071): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.539000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.539000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.573721 kernel: audit: type=1400 audit(1696274671.539:1072): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.573775 kernel: audit: type=1400 audit(1696274671.539:1073): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.573821 kernel: audit: type=1400 audit(1696274671.548:1074): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.548000 audit: BPF prog-id=120 op=LOAD Oct 2 19:24:31.549000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.549000 audit[2322]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2150 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:31.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335343531333236333039383765663938303433363233393661313265 Oct 2 19:24:31.549000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.549000 audit[2322]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2150 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:31.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335343531333236333039383765663938303433363233393661313265 Oct 2 19:24:31.549000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.549000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.549000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.549000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.549000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.549000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.549000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.549000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.549000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.549000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.549000 audit: BPF prog-id=121 op=LOAD Oct 2 19:24:31.549000 audit[2322]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001e7eb0 items=0 ppid=2150 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:31.549000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335343531333236333039383765663938303433363233393661313265 Oct 2 19:24:31.552000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.552000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.552000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.552000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.552000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.552000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.552000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.552000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.552000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.552000 audit: BPF prog-id=122 op=LOAD Oct 2 19:24:31.552000 audit[2322]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001e7ef8 items=0 ppid=2150 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:31.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335343531333236333039383765663938303433363233393661313265 Oct 2 19:24:31.562000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:24:31.562000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:24:31.562000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.562000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.562000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.562000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.562000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.562000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.562000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.562000 audit[2322]: AVC avc: denied { perfmon } for pid=2322 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.562000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.562000 audit[2322]: AVC avc: denied { bpf } for pid=2322 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:31.562000 audit: BPF prog-id=123 op=LOAD Oct 2 19:24:31.562000 audit[2322]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003b2308 items=0 ppid=2150 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:31.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335343531333236333039383765663938303433363233393661313265 Oct 2 19:24:31.597928 env[1059]: time="2023-10-02T19:24:31.597874863Z" level=info msg="StartContainer for \"3545132630987ef9804362396a12e99bd8566e0bad8142772cb9a06450df02c8\" returns successfully" Oct 2 19:24:33.955000 audit[2378]: NETFILTER_CFG table=filter:105 family=2 entries=13 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:24:33.955000 audit[2378]: SYSCALL arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7ffc7680ef20 a2=0 a3=7ffc7680ef0c items=0 ppid=2123 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:33.955000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:24:33.957000 audit[2378]: NETFILTER_CFG table=nat:106 family=2 entries=20 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:24:33.957000 audit[2378]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffc7680ef20 a2=0 a3=7ffc7680ef0c items=0 ppid=2123 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:33.957000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:24:34.011000 audit[2405]: NETFILTER_CFG table=filter:107 family=2 entries=14 op=nft_register_rule pid=2405 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:24:34.011000 audit[2405]: SYSCALL arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7fff395a40e0 a2=0 a3=7fff395a40cc items=0 ppid=2123 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:34.011000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:24:34.012000 audit[2405]: NETFILTER_CFG table=nat:108 family=2 entries=20 op=nft_register_rule pid=2405 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:24:34.012000 audit[2405]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7fff395a40e0 a2=0 a3=7fff395a40cc items=0 ppid=2123 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:34.012000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:24:34.160756 kubelet[1964]: I1002 19:24:34.160717 1964 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-54b47459dd-wtmqt" podStartSLOduration=-9.22337202869412e+09 pod.CreationTimestamp="2023-10-02 19:24:26 +0000 UTC" firstStartedPulling="2023-10-02 19:24:26.753355766 +0000 UTC m=+12.818053641" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:24:32.273138602 +0000 UTC m=+18.337836517" watchObservedRunningTime="2023-10-02 19:24:34.160655417 +0000 UTC m=+20.225353283" Oct 2 19:24:34.161609 kubelet[1964]: I1002 19:24:34.161592 1964 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:24:34.167431 systemd[1]: Created slice kubepods-besteffort-pod7595e7e9_1229_4063_bc96_e09c97220cbf.slice. Oct 2 19:24:34.218482 kubelet[1964]: I1002 19:24:34.218349 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7595e7e9-1229-4063-bc96-e09c97220cbf-tigera-ca-bundle\") pod \"calico-typha-78855c4dc5-p6tnk\" (UID: \"7595e7e9-1229-4063-bc96-e09c97220cbf\") " pod="calico-system/calico-typha-78855c4dc5-p6tnk" Oct 2 19:24:34.218482 kubelet[1964]: I1002 19:24:34.218398 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/7595e7e9-1229-4063-bc96-e09c97220cbf-typha-certs\") pod \"calico-typha-78855c4dc5-p6tnk\" (UID: \"7595e7e9-1229-4063-bc96-e09c97220cbf\") " pod="calico-system/calico-typha-78855c4dc5-p6tnk" Oct 2 19:24:34.218482 kubelet[1964]: I1002 19:24:34.218435 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l4ngq\" (UniqueName: \"kubernetes.io/projected/7595e7e9-1229-4063-bc96-e09c97220cbf-kube-api-access-l4ngq\") pod \"calico-typha-78855c4dc5-p6tnk\" (UID: \"7595e7e9-1229-4063-bc96-e09c97220cbf\") " pod="calico-system/calico-typha-78855c4dc5-p6tnk" Oct 2 19:24:34.244580 kubelet[1964]: I1002 19:24:34.244519 1964 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:24:34.251958 systemd[1]: Created slice kubepods-besteffort-poddf3f9ae4_4266_4fd6_97f2_bcb79a18f4aa.slice. Oct 2 19:24:34.319730 kubelet[1964]: I1002 19:24:34.319322 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa-tigera-ca-bundle\") pod \"calico-node-skxdq\" (UID: \"df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa\") " pod="calico-system/calico-node-skxdq" Oct 2 19:24:34.319954 kubelet[1964]: I1002 19:24:34.319769 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa-var-run-calico\") pod \"calico-node-skxdq\" (UID: \"df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa\") " pod="calico-system/calico-node-skxdq" Oct 2 19:24:34.319954 kubelet[1964]: I1002 19:24:34.319804 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa-var-lib-calico\") pod \"calico-node-skxdq\" (UID: \"df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa\") " pod="calico-system/calico-node-skxdq" Oct 2 19:24:34.319954 kubelet[1964]: I1002 19:24:34.319843 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa-cni-log-dir\") pod \"calico-node-skxdq\" (UID: \"df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa\") " pod="calico-system/calico-node-skxdq" Oct 2 19:24:34.319954 kubelet[1964]: I1002 19:24:34.319897 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa-cni-net-dir\") pod \"calico-node-skxdq\" (UID: \"df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa\") " pod="calico-system/calico-node-skxdq" Oct 2 19:24:34.319954 kubelet[1964]: I1002 19:24:34.319928 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa-flexvol-driver-host\") pod \"calico-node-skxdq\" (UID: \"df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa\") " pod="calico-system/calico-node-skxdq" Oct 2 19:24:34.320205 kubelet[1964]: I1002 19:24:34.319958 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa-lib-modules\") pod \"calico-node-skxdq\" (UID: \"df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa\") " pod="calico-system/calico-node-skxdq" Oct 2 19:24:34.320205 kubelet[1964]: I1002 19:24:34.319987 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa-node-certs\") pod \"calico-node-skxdq\" (UID: \"df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa\") " pod="calico-system/calico-node-skxdq" Oct 2 19:24:34.320205 kubelet[1964]: I1002 19:24:34.320035 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa-xtables-lock\") pod \"calico-node-skxdq\" (UID: \"df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa\") " pod="calico-system/calico-node-skxdq" Oct 2 19:24:34.320205 kubelet[1964]: I1002 19:24:34.320072 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa-policysync\") pod \"calico-node-skxdq\" (UID: \"df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa\") " pod="calico-system/calico-node-skxdq" Oct 2 19:24:34.320205 kubelet[1964]: I1002 19:24:34.320102 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5b7pn\" (UniqueName: \"kubernetes.io/projected/df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa-kube-api-access-5b7pn\") pod \"calico-node-skxdq\" (UID: \"df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa\") " pod="calico-system/calico-node-skxdq" Oct 2 19:24:34.320367 kubelet[1964]: I1002 19:24:34.320131 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa-cni-bin-dir\") pod \"calico-node-skxdq\" (UID: \"df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa\") " pod="calico-system/calico-node-skxdq" Oct 2 19:24:34.428383 kubelet[1964]: E1002 19:24:34.428338 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:34.428383 kubelet[1964]: W1002 19:24:34.428362 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:34.428580 kubelet[1964]: E1002 19:24:34.428392 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:34.428899 kubelet[1964]: E1002 19:24:34.428848 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:34.428899 kubelet[1964]: W1002 19:24:34.428893 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:34.428988 kubelet[1964]: E1002 19:24:34.428908 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:34.429062 kubelet[1964]: E1002 19:24:34.429040 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:34.429062 kubelet[1964]: W1002 19:24:34.429056 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:34.429142 kubelet[1964]: E1002 19:24:34.429068 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:34.432030 kubelet[1964]: E1002 19:24:34.432007 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:34.432173 kubelet[1964]: W1002 19:24:34.432145 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:34.432339 kubelet[1964]: E1002 19:24:34.432326 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:34.432695 kubelet[1964]: E1002 19:24:34.432671 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:34.432780 kubelet[1964]: W1002 19:24:34.432767 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:34.432872 kubelet[1964]: E1002 19:24:34.432845 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:34.450448 kubelet[1964]: E1002 19:24:34.450389 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:34.450640 kubelet[1964]: W1002 19:24:34.450623 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:34.450752 kubelet[1964]: E1002 19:24:34.450738 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:34.473674 env[1059]: time="2023-10-02T19:24:34.473253050Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-78855c4dc5-p6tnk,Uid:7595e7e9-1229-4063-bc96-e09c97220cbf,Namespace:calico-system,Attempt:0,}" Oct 2 19:24:34.499081 env[1059]: time="2023-10-02T19:24:34.499010368Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:24:34.499252 env[1059]: time="2023-10-02T19:24:34.499082893Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:24:34.499252 env[1059]: time="2023-10-02T19:24:34.499113725Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:24:34.499326 env[1059]: time="2023-10-02T19:24:34.499248104Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/20e79ac22cfc363068f80436e7cba3fbb3896a756d7b124be5ca577180e6a1a6 pid=2424 runtime=io.containerd.runc.v2 Oct 2 19:24:34.515291 systemd[1]: Started cri-containerd-20e79ac22cfc363068f80436e7cba3fbb3896a756d7b124be5ca577180e6a1a6.scope. Oct 2 19:24:34.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.544000 audit: BPF prog-id=124 op=LOAD Oct 2 19:24:34.544000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.544000 audit[2434]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2424 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:34.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230653739616332326366633336333036386638303433366537636261 Oct 2 19:24:34.544000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.544000 audit[2434]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2424 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:34.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230653739616332326366633336333036386638303433366537636261 Oct 2 19:24:34.544000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.544000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.544000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.544000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.544000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.544000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.544000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.544000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.544000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.544000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.544000 audit: BPF prog-id=125 op=LOAD Oct 2 19:24:34.544000 audit[2434]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c6140 items=0 ppid=2424 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:34.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230653739616332326366633336333036386638303433366537636261 Oct 2 19:24:34.545000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.545000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.545000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.545000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.545000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.545000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.545000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.545000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.545000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.545000 audit: BPF prog-id=126 op=LOAD Oct 2 19:24:34.545000 audit[2434]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c6188 items=0 ppid=2424 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:34.545000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230653739616332326366633336333036386638303433366537636261 Oct 2 19:24:34.546000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:24:34.546000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:24:34.546000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.546000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.546000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.546000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.546000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.546000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.546000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.546000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.546000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.546000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.546000 audit: BPF prog-id=127 op=LOAD Oct 2 19:24:34.546000 audit[2434]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c6598 items=0 ppid=2424 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:34.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230653739616332326366633336333036386638303433366537636261 Oct 2 19:24:34.556051 env[1059]: time="2023-10-02T19:24:34.555998564Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-skxdq,Uid:df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa,Namespace:calico-system,Attempt:0,}" Oct 2 19:24:34.633242 env[1059]: time="2023-10-02T19:24:34.633185074Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-78855c4dc5-p6tnk,Uid:7595e7e9-1229-4063-bc96-e09c97220cbf,Namespace:calico-system,Attempt:0,} returns sandbox id \"20e79ac22cfc363068f80436e7cba3fbb3896a756d7b124be5ca577180e6a1a6\"" Oct 2 19:24:34.635100 env[1059]: time="2023-10-02T19:24:34.635054568Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\"" Oct 2 19:24:34.871281 env[1059]: time="2023-10-02T19:24:34.871195313Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:24:34.871496 env[1059]: time="2023-10-02T19:24:34.871469773Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:24:34.871628 env[1059]: time="2023-10-02T19:24:34.871601446Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:24:34.872442 env[1059]: time="2023-10-02T19:24:34.872385276Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/324d43550401cf37b5df95e7be0246d0fd2197e8bb32193e9eb354b2c9cb2437 pid=2464 runtime=io.containerd.runc.v2 Oct 2 19:24:34.884680 systemd[1]: Started cri-containerd-324d43550401cf37b5df95e7be0246d0fd2197e8bb32193e9eb354b2c9cb2437.scope. Oct 2 19:24:34.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.908000 audit: BPF prog-id=128 op=LOAD Oct 2 19:24:34.909000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.909000 audit[2473]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2464 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:34.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332346434333535303430316366333762356466393565376265303234 Oct 2 19:24:34.909000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.909000 audit[2473]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2464 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:34.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332346434333535303430316366333762356466393565376265303234 Oct 2 19:24:34.909000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.909000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.909000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.909000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.909000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.909000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.909000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.909000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.909000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.909000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.909000 audit: BPF prog-id=129 op=LOAD Oct 2 19:24:34.909000 audit[2473]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00037c720 items=0 ppid=2464 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:34.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332346434333535303430316366333762356466393565376265303234 Oct 2 19:24:34.910000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.910000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.910000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.910000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.910000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.910000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.910000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.910000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.910000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.910000 audit: BPF prog-id=130 op=LOAD Oct 2 19:24:34.910000 audit[2473]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00037c768 items=0 ppid=2464 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:34.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332346434333535303430316366333762356466393565376265303234 Oct 2 19:24:34.912000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:24:34.912000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:24:34.912000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.912000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.912000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.912000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.912000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.912000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.912000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.912000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.912000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.912000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:34.912000 audit: BPF prog-id=131 op=LOAD Oct 2 19:24:34.912000 audit[2473]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00037cb78 items=0 ppid=2464 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:34.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332346434333535303430316366333762356466393565376265303234 Oct 2 19:24:34.936871 env[1059]: time="2023-10-02T19:24:34.936780858Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-skxdq,Uid:df3f9ae4-4266-4fd6-97f2-bcb79a18f4aa,Namespace:calico-system,Attempt:0,} returns sandbox id \"324d43550401cf37b5df95e7be0246d0fd2197e8bb32193e9eb354b2c9cb2437\"" Oct 2 19:24:35.081000 audit[2522]: NETFILTER_CFG table=filter:109 family=2 entries=14 op=nft_register_rule pid=2522 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:24:35.081000 audit[2522]: SYSCALL arch=c000003e syscall=46 success=yes exit=4732 a0=3 a1=7ffc884e59d0 a2=0 a3=7ffc884e59bc items=0 ppid=2123 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:35.081000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:24:35.082000 audit[2522]: NETFILTER_CFG table=nat:110 family=2 entries=20 op=nft_register_rule pid=2522 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:24:35.082000 audit[2522]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffc884e59d0 a2=0 a3=7ffc884e59bc items=0 ppid=2123 pid=2522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:35.082000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:24:36.512333 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1154768236.mount: Deactivated successfully. Oct 2 19:24:39.093353 env[1059]: time="2023-10-02T19:24:39.093295552Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:39.095206 env[1059]: time="2023-10-02T19:24:39.095140989Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7b60c7012b1c9f468779a685b9b50ddfd754f2d92ea6769a681942aafb2d113f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:39.097485 env[1059]: time="2023-10-02T19:24:39.097459380Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:39.099538 env[1059]: time="2023-10-02T19:24:39.099499086Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:7fb0e011ffae9f88333b7a7488dae37f1d534b46d2b11a0fe2b5d129df58789c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:39.100720 env[1059]: time="2023-10-02T19:24:39.100679258Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.25.0\" returns image reference \"sha256:7b60c7012b1c9f468779a685b9b50ddfd754f2d92ea6769a681942aafb2d113f\"" Oct 2 19:24:39.101413 env[1059]: time="2023-10-02T19:24:39.101369033Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\"" Oct 2 19:24:39.103833 env[1059]: time="2023-10-02T19:24:39.103793123Z" level=info msg="CreateContainer within sandbox \"20e79ac22cfc363068f80436e7cba3fbb3896a756d7b124be5ca577180e6a1a6\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Oct 2 19:24:39.132671 env[1059]: time="2023-10-02T19:24:39.132604606Z" level=info msg="CreateContainer within sandbox \"20e79ac22cfc363068f80436e7cba3fbb3896a756d7b124be5ca577180e6a1a6\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"be3c2406658bf49eecad35410c1f87c047285057f9e17da81c7662102e4485dc\"" Oct 2 19:24:39.135099 env[1059]: time="2023-10-02T19:24:39.133266916Z" level=info msg="StartContainer for \"be3c2406658bf49eecad35410c1f87c047285057f9e17da81c7662102e4485dc\"" Oct 2 19:24:39.169642 systemd[1]: Started cri-containerd-be3c2406658bf49eecad35410c1f87c047285057f9e17da81c7662102e4485dc.scope. Oct 2 19:24:39.176819 systemd[1]: run-containerd-runc-k8s.io-be3c2406658bf49eecad35410c1f87c047285057f9e17da81c7662102e4485dc-runc.siKNat.mount: Deactivated successfully. Oct 2 19:24:39.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.196207 kernel: kauditd_printk_skb: 179 callbacks suppressed Oct 2 19:24:39.196288 kernel: audit: type=1400 audit(1696274679.192:1125): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.203374 kernel: audit: type=1400 audit(1696274679.192:1126): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.203434 kernel: audit: type=1400 audit(1696274679.192:1127): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.207006 kernel: audit: type=1400 audit(1696274679.192:1128): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.213963 kernel: audit: type=1400 audit(1696274679.192:1129): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.214043 kernel: audit: type=1400 audit(1696274679.192:1130): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.220993 kernel: audit: type=1400 audit(1696274679.192:1131): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.221048 kernel: audit: type=1400 audit(1696274679.192:1132): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.192000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.228073 kernel: audit: type=1400 audit(1696274679.192:1133): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.232968 kernel: audit: type=1400 audit(1696274679.198:1134): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.198000 audit: BPF prog-id=132 op=LOAD Oct 2 19:24:39.198000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.198000 audit[2531]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2424 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:39.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336332343036363538626634396565636164333534313063316638 Oct 2 19:24:39.198000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.198000 audit[2531]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2424 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:39.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336332343036363538626634396565636164333534313063316638 Oct 2 19:24:39.198000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.198000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.198000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.198000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.198000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.198000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.198000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.198000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.198000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.198000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.198000 audit: BPF prog-id=133 op=LOAD Oct 2 19:24:39.198000 audit[2531]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0001dfcf0 items=0 ppid=2424 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:39.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336332343036363538626634396565636164333534313063316638 Oct 2 19:24:39.206000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.206000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.206000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.206000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.206000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.206000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.206000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.206000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.206000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.206000 audit: BPF prog-id=134 op=LOAD Oct 2 19:24:39.206000 audit[2531]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0001dfd38 items=0 ppid=2424 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:39.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336332343036363538626634396565636164333534313063316638 Oct 2 19:24:39.216000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:24:39.216000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:24:39.216000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.216000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.216000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.216000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.216000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.216000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.216000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.216000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.216000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.216000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:39.216000 audit: BPF prog-id=135 op=LOAD Oct 2 19:24:39.216000 audit[2531]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00031a148 items=0 ppid=2424 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:39.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265336332343036363538626634396565636164333534313063316638 Oct 2 19:24:39.258080 env[1059]: time="2023-10-02T19:24:39.258000907Z" level=info msg="StartContainer for \"be3c2406658bf49eecad35410c1f87c047285057f9e17da81c7662102e4485dc\" returns successfully" Oct 2 19:24:39.349918 kubelet[1964]: E1002 19:24:39.349632 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.349918 kubelet[1964]: W1002 19:24:39.349659 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.349918 kubelet[1964]: E1002 19:24:39.349680 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.349918 kubelet[1964]: E1002 19:24:39.349828 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.349918 kubelet[1964]: W1002 19:24:39.349836 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.349918 kubelet[1964]: E1002 19:24:39.349848 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.350556 kubelet[1964]: E1002 19:24:39.350008 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.350556 kubelet[1964]: W1002 19:24:39.350017 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.350556 kubelet[1964]: E1002 19:24:39.350029 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.350556 kubelet[1964]: E1002 19:24:39.350234 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.350556 kubelet[1964]: W1002 19:24:39.350243 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.350556 kubelet[1964]: E1002 19:24:39.350256 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.350556 kubelet[1964]: E1002 19:24:39.350422 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.350556 kubelet[1964]: W1002 19:24:39.350431 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.350556 kubelet[1964]: E1002 19:24:39.350443 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.350927 kubelet[1964]: E1002 19:24:39.350597 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.350927 kubelet[1964]: W1002 19:24:39.350607 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.350927 kubelet[1964]: E1002 19:24:39.350619 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.350927 kubelet[1964]: E1002 19:24:39.350820 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.350927 kubelet[1964]: W1002 19:24:39.350829 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.350927 kubelet[1964]: E1002 19:24:39.350845 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.351100 kubelet[1964]: E1002 19:24:39.351021 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.351100 kubelet[1964]: W1002 19:24:39.351031 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.351100 kubelet[1964]: E1002 19:24:39.351045 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.351644 kubelet[1964]: E1002 19:24:39.351625 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.351644 kubelet[1964]: W1002 19:24:39.351641 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.351739 kubelet[1964]: E1002 19:24:39.351655 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.351889 kubelet[1964]: E1002 19:24:39.351838 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.351889 kubelet[1964]: W1002 19:24:39.351870 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.351889 kubelet[1964]: E1002 19:24:39.351884 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.352047 kubelet[1964]: E1002 19:24:39.352016 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.352047 kubelet[1964]: W1002 19:24:39.352042 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.352147 kubelet[1964]: E1002 19:24:39.352053 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.352212 kubelet[1964]: E1002 19:24:39.352183 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.352212 kubelet[1964]: W1002 19:24:39.352208 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.352301 kubelet[1964]: E1002 19:24:39.352219 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.363934 kubelet[1964]: E1002 19:24:39.363840 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.363934 kubelet[1964]: W1002 19:24:39.363902 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.363934 kubelet[1964]: E1002 19:24:39.363942 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.364371 kubelet[1964]: E1002 19:24:39.364196 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.364371 kubelet[1964]: W1002 19:24:39.364211 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.364371 kubelet[1964]: E1002 19:24:39.364227 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.364533 kubelet[1964]: E1002 19:24:39.364470 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.364533 kubelet[1964]: W1002 19:24:39.364484 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.364533 kubelet[1964]: E1002 19:24:39.364502 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.364905 kubelet[1964]: E1002 19:24:39.364840 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.364905 kubelet[1964]: W1002 19:24:39.364880 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.364905 kubelet[1964]: E1002 19:24:39.364906 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.365215 kubelet[1964]: E1002 19:24:39.365163 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.365215 kubelet[1964]: W1002 19:24:39.365197 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.365356 kubelet[1964]: E1002 19:24:39.365221 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.365489 kubelet[1964]: E1002 19:24:39.365461 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.365561 kubelet[1964]: W1002 19:24:39.365495 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.365561 kubelet[1964]: E1002 19:24:39.365521 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.365825 kubelet[1964]: E1002 19:24:39.365793 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.365825 kubelet[1964]: W1002 19:24:39.365811 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.366009 kubelet[1964]: E1002 19:24:39.365872 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.366504 kubelet[1964]: E1002 19:24:39.366263 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.366504 kubelet[1964]: W1002 19:24:39.366280 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.366504 kubelet[1964]: E1002 19:24:39.366294 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.367029 kubelet[1964]: E1002 19:24:39.366835 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.367029 kubelet[1964]: W1002 19:24:39.366915 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.367029 kubelet[1964]: E1002 19:24:39.366970 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.367251 kubelet[1964]: E1002 19:24:39.367158 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.367251 kubelet[1964]: W1002 19:24:39.367170 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.367251 kubelet[1964]: E1002 19:24:39.367191 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.367419 kubelet[1964]: E1002 19:24:39.367348 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.367419 kubelet[1964]: W1002 19:24:39.367371 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.367419 kubelet[1964]: E1002 19:24:39.367386 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.367590 kubelet[1964]: E1002 19:24:39.367523 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.367590 kubelet[1964]: W1002 19:24:39.367532 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.367590 kubelet[1964]: E1002 19:24:39.367544 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.367759 kubelet[1964]: E1002 19:24:39.367713 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.367759 kubelet[1964]: W1002 19:24:39.367723 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.367759 kubelet[1964]: E1002 19:24:39.367735 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.369028 kubelet[1964]: E1002 19:24:39.368936 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.369028 kubelet[1964]: W1002 19:24:39.368956 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.369250 kubelet[1964]: E1002 19:24:39.369043 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.369250 kubelet[1964]: E1002 19:24:39.369154 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.369250 kubelet[1964]: W1002 19:24:39.369163 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.369250 kubelet[1964]: E1002 19:24:39.369190 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.369483 kubelet[1964]: E1002 19:24:39.369368 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.369483 kubelet[1964]: W1002 19:24:39.369377 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.369483 kubelet[1964]: E1002 19:24:39.369390 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.369644 kubelet[1964]: E1002 19:24:39.369548 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.369644 kubelet[1964]: W1002 19:24:39.369559 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.369644 kubelet[1964]: E1002 19:24:39.369572 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:39.370898 kubelet[1964]: E1002 19:24:39.369838 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:39.370898 kubelet[1964]: W1002 19:24:39.369886 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:39.370898 kubelet[1964]: E1002 19:24:39.369900 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.305047 kubelet[1964]: I1002 19:24:40.304986 1964 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-78855c4dc5-p6tnk" podStartSLOduration=-9.223372030549871e+09 pod.CreationTimestamp="2023-10-02 19:24:34 +0000 UTC" firstStartedPulling="2023-10-02 19:24:34.634571891 +0000 UTC m=+20.699269756" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:24:39.293695748 +0000 UTC m=+25.358393613" watchObservedRunningTime="2023-10-02 19:24:40.304903914 +0000 UTC m=+26.369601829" Oct 2 19:24:40.361301 kubelet[1964]: E1002 19:24:40.361216 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.361301 kubelet[1964]: W1002 19:24:40.361294 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.362179 kubelet[1964]: E1002 19:24:40.361340 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.362179 kubelet[1964]: E1002 19:24:40.361929 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.362179 kubelet[1964]: W1002 19:24:40.361951 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.362179 kubelet[1964]: E1002 19:24:40.361979 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.362901 kubelet[1964]: E1002 19:24:40.362823 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.363047 kubelet[1964]: W1002 19:24:40.362937 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.363047 kubelet[1964]: E1002 19:24:40.362973 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.363539 kubelet[1964]: E1002 19:24:40.363487 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.363539 kubelet[1964]: W1002 19:24:40.363517 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.363755 kubelet[1964]: E1002 19:24:40.363548 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.364191 kubelet[1964]: E1002 19:24:40.364148 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.364191 kubelet[1964]: W1002 19:24:40.364177 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.364445 kubelet[1964]: E1002 19:24:40.364206 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.364844 kubelet[1964]: E1002 19:24:40.364791 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.364844 kubelet[1964]: W1002 19:24:40.364822 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.365089 kubelet[1964]: E1002 19:24:40.364880 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.365479 kubelet[1964]: E1002 19:24:40.365435 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.365595 kubelet[1964]: W1002 19:24:40.365491 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.365595 kubelet[1964]: E1002 19:24:40.365522 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.366205 kubelet[1964]: E1002 19:24:40.366165 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.366205 kubelet[1964]: W1002 19:24:40.366195 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.366446 kubelet[1964]: E1002 19:24:40.366225 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.366977 kubelet[1964]: E1002 19:24:40.366827 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.366977 kubelet[1964]: W1002 19:24:40.366883 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.366977 kubelet[1964]: E1002 19:24:40.366915 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.367394 kubelet[1964]: E1002 19:24:40.367355 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.367492 kubelet[1964]: W1002 19:24:40.367422 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.367492 kubelet[1964]: E1002 19:24:40.367456 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.367792 kubelet[1964]: E1002 19:24:40.367752 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.367792 kubelet[1964]: W1002 19:24:40.367780 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.368031 kubelet[1964]: E1002 19:24:40.367808 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.368485 kubelet[1964]: E1002 19:24:40.368381 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.368485 kubelet[1964]: W1002 19:24:40.368470 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.368653 kubelet[1964]: E1002 19:24:40.368550 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.373128 kubelet[1964]: E1002 19:24:40.373089 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.373345 kubelet[1964]: W1002 19:24:40.373314 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.373546 kubelet[1964]: E1002 19:24:40.373520 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.374581 kubelet[1964]: E1002 19:24:40.374481 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.375269 kubelet[1964]: W1002 19:24:40.375238 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.375501 kubelet[1964]: E1002 19:24:40.375474 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.376128 kubelet[1964]: E1002 19:24:40.376086 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.376128 kubelet[1964]: W1002 19:24:40.376120 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.376324 kubelet[1964]: E1002 19:24:40.376164 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.377046 kubelet[1964]: E1002 19:24:40.376964 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.377046 kubelet[1964]: W1002 19:24:40.377038 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.377241 kubelet[1964]: E1002 19:24:40.377137 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.377970 kubelet[1964]: E1002 19:24:40.377929 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.377970 kubelet[1964]: W1002 19:24:40.377960 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.378173 kubelet[1964]: E1002 19:24:40.378145 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.378893 kubelet[1964]: E1002 19:24:40.378791 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.379022 kubelet[1964]: W1002 19:24:40.378956 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.379098 kubelet[1964]: E1002 19:24:40.379084 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.384067 kubelet[1964]: E1002 19:24:40.384015 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.384067 kubelet[1964]: W1002 19:24:40.384030 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.384361 kubelet[1964]: E1002 19:24:40.384333 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.384695 kubelet[1964]: E1002 19:24:40.384666 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.384695 kubelet[1964]: W1002 19:24:40.384680 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.384837 kubelet[1964]: E1002 19:24:40.384764 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.385185 kubelet[1964]: E1002 19:24:40.385140 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.385185 kubelet[1964]: W1002 19:24:40.385156 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.385391 kubelet[1964]: E1002 19:24:40.385369 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.385689 kubelet[1964]: E1002 19:24:40.385664 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.385689 kubelet[1964]: W1002 19:24:40.385679 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.385843 kubelet[1964]: E1002 19:24:40.385698 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.386141 kubelet[1964]: E1002 19:24:40.386116 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.386141 kubelet[1964]: W1002 19:24:40.386131 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.386325 kubelet[1964]: E1002 19:24:40.386147 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.386569 kubelet[1964]: E1002 19:24:40.386541 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.386569 kubelet[1964]: W1002 19:24:40.386555 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.386718 kubelet[1964]: E1002 19:24:40.386689 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.387027 kubelet[1964]: E1002 19:24:40.386994 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.387027 kubelet[1964]: W1002 19:24:40.387008 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.387153 kubelet[1964]: E1002 19:24:40.387139 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.387358 kubelet[1964]: E1002 19:24:40.387337 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.387358 kubelet[1964]: W1002 19:24:40.387352 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.387464 kubelet[1964]: E1002 19:24:40.387441 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.387633 kubelet[1964]: E1002 19:24:40.387615 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.387633 kubelet[1964]: W1002 19:24:40.387627 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.387724 kubelet[1964]: E1002 19:24:40.387643 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.387913 kubelet[1964]: E1002 19:24:40.387892 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.387913 kubelet[1964]: W1002 19:24:40.387906 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.388011 kubelet[1964]: E1002 19:24:40.387918 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.388249 kubelet[1964]: E1002 19:24:40.388227 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.388301 kubelet[1964]: W1002 19:24:40.388262 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.388301 kubelet[1964]: E1002 19:24:40.388276 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.388661 kubelet[1964]: E1002 19:24:40.388641 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:40.388661 kubelet[1964]: W1002 19:24:40.388654 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:40.388742 kubelet[1964]: E1002 19:24:40.388666 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:40.410000 audit[2649]: NETFILTER_CFG table=filter:111 family=2 entries=13 op=nft_register_rule pid=2649 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:24:40.410000 audit[2649]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffc5d5e2250 a2=0 a3=7ffc5d5e223c items=0 ppid=2123 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:40.410000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:24:40.412000 audit[2649]: NETFILTER_CFG table=nat:112 family=2 entries=27 op=nft_register_chain pid=2649 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:24:40.412000 audit[2649]: SYSCALL arch=c000003e syscall=46 success=yes exit=8836 a0=3 a1=7ffc5d5e2250 a2=0 a3=7ffc5d5e223c items=0 ppid=2123 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:40.412000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:24:40.718416 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3280655510.mount: Deactivated successfully. Oct 2 19:24:41.379745 kubelet[1964]: E1002 19:24:41.379602 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.379745 kubelet[1964]: W1002 19:24:41.379639 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.381405 kubelet[1964]: E1002 19:24:41.379680 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.381405 kubelet[1964]: E1002 19:24:41.381134 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.381405 kubelet[1964]: W1002 19:24:41.381200 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.381405 kubelet[1964]: E1002 19:24:41.381239 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.382182 kubelet[1964]: E1002 19:24:41.381898 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.382182 kubelet[1964]: W1002 19:24:41.381926 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.382182 kubelet[1964]: E1002 19:24:41.381955 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.383776 kubelet[1964]: E1002 19:24:41.382639 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.383776 kubelet[1964]: W1002 19:24:41.382670 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.383776 kubelet[1964]: E1002 19:24:41.382701 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.383776 kubelet[1964]: E1002 19:24:41.383108 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.383776 kubelet[1964]: W1002 19:24:41.383128 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.383776 kubelet[1964]: E1002 19:24:41.383157 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.383776 kubelet[1964]: E1002 19:24:41.383488 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.383776 kubelet[1964]: W1002 19:24:41.383507 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.383776 kubelet[1964]: E1002 19:24:41.383535 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.385542 kubelet[1964]: E1002 19:24:41.384986 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.385542 kubelet[1964]: W1002 19:24:41.385014 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.385542 kubelet[1964]: E1002 19:24:41.385046 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.385542 kubelet[1964]: E1002 19:24:41.385359 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.385542 kubelet[1964]: W1002 19:24:41.385377 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.385542 kubelet[1964]: E1002 19:24:41.385407 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.386510 kubelet[1964]: E1002 19:24:41.386273 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.386510 kubelet[1964]: W1002 19:24:41.386299 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.386510 kubelet[1964]: E1002 19:24:41.386327 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.387204 kubelet[1964]: E1002 19:24:41.387175 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.387545 kubelet[1964]: W1002 19:24:41.387364 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.387545 kubelet[1964]: E1002 19:24:41.387407 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.388029 kubelet[1964]: E1002 19:24:41.388004 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.388204 kubelet[1964]: W1002 19:24:41.388177 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.388362 kubelet[1964]: E1002 19:24:41.388340 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.388814 kubelet[1964]: E1002 19:24:41.388789 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.389084 kubelet[1964]: W1002 19:24:41.389056 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.389285 kubelet[1964]: E1002 19:24:41.389263 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.390040 kubelet[1964]: E1002 19:24:41.390014 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.390213 kubelet[1964]: W1002 19:24:41.390187 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.390384 kubelet[1964]: E1002 19:24:41.390338 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.390964 kubelet[1964]: E1002 19:24:41.390940 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.391115 kubelet[1964]: W1002 19:24:41.391091 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.391295 kubelet[1964]: E1002 19:24:41.391273 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.391774 kubelet[1964]: E1002 19:24:41.391732 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.391774 kubelet[1964]: W1002 19:24:41.391773 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.392060 kubelet[1964]: E1002 19:24:41.391878 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.392451 kubelet[1964]: E1002 19:24:41.392218 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.392451 kubelet[1964]: W1002 19:24:41.392247 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.392451 kubelet[1964]: E1002 19:24:41.392292 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.392668 kubelet[1964]: E1002 19:24:41.392568 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.392668 kubelet[1964]: W1002 19:24:41.392587 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.392668 kubelet[1964]: E1002 19:24:41.392615 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.393031 kubelet[1964]: E1002 19:24:41.392999 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.393031 kubelet[1964]: W1002 19:24:41.393028 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.393316 kubelet[1964]: E1002 19:24:41.393288 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.393607 kubelet[1964]: E1002 19:24:41.393338 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.393607 kubelet[1964]: W1002 19:24:41.393600 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.393983 kubelet[1964]: E1002 19:24:41.393942 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.393983 kubelet[1964]: W1002 19:24:41.393973 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.394235 kubelet[1964]: E1002 19:24:41.394002 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.394781 kubelet[1964]: E1002 19:24:41.394461 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.394781 kubelet[1964]: W1002 19:24:41.394482 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.394781 kubelet[1964]: E1002 19:24:41.394519 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.394781 kubelet[1964]: E1002 19:24:41.394548 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.395324 kubelet[1964]: E1002 19:24:41.395298 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.395488 kubelet[1964]: W1002 19:24:41.395463 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.395658 kubelet[1964]: E1002 19:24:41.395638 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.396183 kubelet[1964]: E1002 19:24:41.396159 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.396340 kubelet[1964]: W1002 19:24:41.396315 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.396505 kubelet[1964]: E1002 19:24:41.396482 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.396984 kubelet[1964]: E1002 19:24:41.396950 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.396984 kubelet[1964]: W1002 19:24:41.396982 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.397211 kubelet[1964]: E1002 19:24:41.397027 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.397360 kubelet[1964]: E1002 19:24:41.397326 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.397360 kubelet[1964]: W1002 19:24:41.397358 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.397524 kubelet[1964]: E1002 19:24:41.397398 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.398457 kubelet[1964]: E1002 19:24:41.397733 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.398457 kubelet[1964]: W1002 19:24:41.397764 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.398457 kubelet[1964]: E1002 19:24:41.397792 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.398457 kubelet[1964]: E1002 19:24:41.398155 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.398457 kubelet[1964]: W1002 19:24:41.398173 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.398457 kubelet[1964]: E1002 19:24:41.398200 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.398951 kubelet[1964]: E1002 19:24:41.398918 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.398951 kubelet[1964]: W1002 19:24:41.398940 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.399112 kubelet[1964]: E1002 19:24:41.398970 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.399362 kubelet[1964]: E1002 19:24:41.399325 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.399362 kubelet[1964]: W1002 19:24:41.399358 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.399639 kubelet[1964]: E1002 19:24:41.399388 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:41.400314 kubelet[1964]: E1002 19:24:41.400259 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:41.400314 kubelet[1964]: W1002 19:24:41.400292 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:41.400314 kubelet[1964]: E1002 19:24:41.400320 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.300003 kubelet[1964]: E1002 19:24:42.299618 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.300003 kubelet[1964]: W1002 19:24:42.299670 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.300003 kubelet[1964]: E1002 19:24:42.299710 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.300510 kubelet[1964]: E1002 19:24:42.300111 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.300510 kubelet[1964]: W1002 19:24:42.300129 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.300510 kubelet[1964]: E1002 19:24:42.300155 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.300510 kubelet[1964]: E1002 19:24:42.300402 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.300510 kubelet[1964]: W1002 19:24:42.300419 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.300510 kubelet[1964]: E1002 19:24:42.300445 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.300937 kubelet[1964]: E1002 19:24:42.300803 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.300937 kubelet[1964]: W1002 19:24:42.300822 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.300937 kubelet[1964]: E1002 19:24:42.300848 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.301269 kubelet[1964]: E1002 19:24:42.301238 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.301269 kubelet[1964]: W1002 19:24:42.301266 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.301474 kubelet[1964]: E1002 19:24:42.301295 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.301610 kubelet[1964]: E1002 19:24:42.301591 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.301610 kubelet[1964]: W1002 19:24:42.301609 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.301793 kubelet[1964]: E1002 19:24:42.301635 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.302083 kubelet[1964]: E1002 19:24:42.302042 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.302083 kubelet[1964]: W1002 19:24:42.302068 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.302410 kubelet[1964]: E1002 19:24:42.302092 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.302555 kubelet[1964]: E1002 19:24:42.302521 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.302555 kubelet[1964]: W1002 19:24:42.302551 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.302805 kubelet[1964]: E1002 19:24:42.302578 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.303009 kubelet[1964]: E1002 19:24:42.302967 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.303009 kubelet[1964]: W1002 19:24:42.302996 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.303224 kubelet[1964]: E1002 19:24:42.303023 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.303471 kubelet[1964]: E1002 19:24:42.303430 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.303471 kubelet[1964]: W1002 19:24:42.303457 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.303673 kubelet[1964]: E1002 19:24:42.303484 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.303825 kubelet[1964]: E1002 19:24:42.303799 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.303825 kubelet[1964]: W1002 19:24:42.303823 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.304079 kubelet[1964]: E1002 19:24:42.303848 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.304192 kubelet[1964]: E1002 19:24:42.304153 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.304192 kubelet[1964]: W1002 19:24:42.304181 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.304352 kubelet[1964]: E1002 19:24:42.304205 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.304573 kubelet[1964]: E1002 19:24:42.304540 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.304573 kubelet[1964]: W1002 19:24:42.304565 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.304740 kubelet[1964]: E1002 19:24:42.304589 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.305059 kubelet[1964]: E1002 19:24:42.305013 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.305059 kubelet[1964]: W1002 19:24:42.305044 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.305242 kubelet[1964]: E1002 19:24:42.305079 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.305387 kubelet[1964]: E1002 19:24:42.305357 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.305387 kubelet[1964]: W1002 19:24:42.305385 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.305582 kubelet[1964]: E1002 19:24:42.305412 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.305987 kubelet[1964]: E1002 19:24:42.305695 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.305987 kubelet[1964]: W1002 19:24:42.305723 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.305987 kubelet[1964]: E1002 19:24:42.305747 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.306651 kubelet[1964]: E1002 19:24:42.306352 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.306651 kubelet[1964]: W1002 19:24:42.306384 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.306651 kubelet[1964]: E1002 19:24:42.306436 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.307375 kubelet[1964]: E1002 19:24:42.307144 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.307375 kubelet[1964]: W1002 19:24:42.307172 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.307375 kubelet[1964]: E1002 19:24:42.307242 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.307994 kubelet[1964]: E1002 19:24:42.307738 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.307994 kubelet[1964]: W1002 19:24:42.307763 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.307994 kubelet[1964]: E1002 19:24:42.307831 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.308736 kubelet[1964]: E1002 19:24:42.308536 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.308736 kubelet[1964]: W1002 19:24:42.308563 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.308736 kubelet[1964]: E1002 19:24:42.308635 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.309466 kubelet[1964]: E1002 19:24:42.309154 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.309466 kubelet[1964]: W1002 19:24:42.309189 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.309466 kubelet[1964]: E1002 19:24:42.309268 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.310455 kubelet[1964]: E1002 19:24:42.310245 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.310455 kubelet[1964]: W1002 19:24:42.310272 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.310455 kubelet[1964]: E1002 19:24:42.310339 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.311080 kubelet[1964]: E1002 19:24:42.310826 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.311080 kubelet[1964]: W1002 19:24:42.310850 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.311080 kubelet[1964]: E1002 19:24:42.310983 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.311447 kubelet[1964]: E1002 19:24:42.311422 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.311599 kubelet[1964]: W1002 19:24:42.311576 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.311798 kubelet[1964]: E1002 19:24:42.311754 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.312557 kubelet[1964]: E1002 19:24:42.312533 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.312709 kubelet[1964]: W1002 19:24:42.312685 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.313242 kubelet[1964]: E1002 19:24:42.313196 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.313554 kubelet[1964]: E1002 19:24:42.313530 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.313704 kubelet[1964]: W1002 19:24:42.313681 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.313930 kubelet[1964]: E1002 19:24:42.313880 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.314235 kubelet[1964]: E1002 19:24:42.314185 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.314235 kubelet[1964]: W1002 19:24:42.314217 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.314403 kubelet[1964]: E1002 19:24:42.314246 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.314590 kubelet[1964]: E1002 19:24:42.314551 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.314590 kubelet[1964]: W1002 19:24:42.314581 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.314762 kubelet[1964]: E1002 19:24:42.314607 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.315163 kubelet[1964]: E1002 19:24:42.315134 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.315282 kubelet[1964]: W1002 19:24:42.315186 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.315282 kubelet[1964]: E1002 19:24:42.315222 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:42.315561 kubelet[1964]: E1002 19:24:42.315533 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Oct 2 19:24:42.315561 kubelet[1964]: W1002 19:24:42.315560 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Oct 2 19:24:42.315729 kubelet[1964]: E1002 19:24:42.315589 1964 plugins.go:736] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Oct 2 19:24:43.065559 env[1059]: time="2023-10-02T19:24:43.065503734Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:43.068687 env[1059]: time="2023-10-02T19:24:43.068645387Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:43.071380 env[1059]: time="2023-10-02T19:24:43.071351465Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:43.076629 env[1059]: time="2023-10-02T19:24:43.076605025Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:182a323c25a3503be8c504892a12a55d99a42c3a582cb8e93a1ecc7c193a44c5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:43.077822 env[1059]: time="2023-10-02T19:24:43.077791652Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.25.0\" returns image reference \"sha256:ed8b7bbb113fecfcce8e15c7d7232b3fe31ed6f37b04df455f6a3f2bc8695d72\"" Oct 2 19:24:43.079967 env[1059]: time="2023-10-02T19:24:43.079930333Z" level=info msg="CreateContainer within sandbox \"324d43550401cf37b5df95e7be0246d0fd2197e8bb32193e9eb354b2c9cb2437\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Oct 2 19:24:43.095728 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2048332115.mount: Deactivated successfully. Oct 2 19:24:43.106239 env[1059]: time="2023-10-02T19:24:43.106202270Z" level=info msg="CreateContainer within sandbox \"324d43550401cf37b5df95e7be0246d0fd2197e8bb32193e9eb354b2c9cb2437\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"68f8787f7c467fc54d9329a7fe5bfb17abeb8d289962bc71f8d34a3c1e0f02ba\"" Oct 2 19:24:43.106966 env[1059]: time="2023-10-02T19:24:43.106942632Z" level=info msg="StartContainer for \"68f8787f7c467fc54d9329a7fe5bfb17abeb8d289962bc71f8d34a3c1e0f02ba\"" Oct 2 19:24:43.142192 systemd[1]: Started cri-containerd-68f8787f7c467fc54d9329a7fe5bfb17abeb8d289962bc71f8d34a3c1e0f02ba.scope. Oct 2 19:24:43.167000 audit[2719]: AVC avc: denied { perfmon } for pid=2719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.167000 audit[2719]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2464 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:43.167000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638663837383766376334363766633534643933323961376665356266 Oct 2 19:24:43.167000 audit[2719]: AVC avc: denied { bpf } for pid=2719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.167000 audit[2719]: AVC avc: denied { bpf } for pid=2719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.167000 audit[2719]: AVC avc: denied { bpf } for pid=2719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.167000 audit[2719]: AVC avc: denied { perfmon } for pid=2719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.167000 audit[2719]: AVC avc: denied { perfmon } for pid=2719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.167000 audit[2719]: AVC avc: denied { perfmon } for pid=2719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.167000 audit[2719]: AVC avc: denied { perfmon } for pid=2719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.167000 audit[2719]: AVC avc: denied { perfmon } for pid=2719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.167000 audit[2719]: AVC avc: denied { bpf } for pid=2719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.167000 audit[2719]: AVC avc: denied { bpf } for pid=2719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.167000 audit: BPF prog-id=136 op=LOAD Oct 2 19:24:43.167000 audit[2719]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000280390 items=0 ppid=2464 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:43.167000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638663837383766376334363766633534643933323961376665356266 Oct 2 19:24:43.169000 audit[2719]: AVC avc: denied { bpf } for pid=2719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.169000 audit[2719]: AVC avc: denied { bpf } for pid=2719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.169000 audit[2719]: AVC avc: denied { perfmon } for pid=2719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.169000 audit[2719]: AVC avc: denied { perfmon } for pid=2719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.169000 audit[2719]: AVC avc: denied { perfmon } for pid=2719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.169000 audit[2719]: AVC avc: denied { perfmon } for pid=2719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.169000 audit[2719]: AVC avc: denied { perfmon } for pid=2719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.169000 audit[2719]: AVC avc: denied { bpf } for pid=2719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.169000 audit[2719]: AVC avc: denied { bpf } for pid=2719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.169000 audit: BPF prog-id=137 op=LOAD Oct 2 19:24:43.169000 audit[2719]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002803d8 items=0 ppid=2464 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:43.169000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638663837383766376334363766633534643933323961376665356266 Oct 2 19:24:43.170000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:24:43.170000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:24:43.171000 audit[2719]: AVC avc: denied { bpf } for pid=2719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.171000 audit[2719]: AVC avc: denied { bpf } for pid=2719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.171000 audit[2719]: AVC avc: denied { bpf } for pid=2719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.171000 audit[2719]: AVC avc: denied { perfmon } for pid=2719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.171000 audit[2719]: AVC avc: denied { perfmon } for pid=2719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.171000 audit[2719]: AVC avc: denied { perfmon } for pid=2719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.171000 audit[2719]: AVC avc: denied { perfmon } for pid=2719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.171000 audit[2719]: AVC avc: denied { perfmon } for pid=2719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.171000 audit[2719]: AVC avc: denied { bpf } for pid=2719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.171000 audit[2719]: AVC avc: denied { bpf } for pid=2719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:43.171000 audit: BPF prog-id=138 op=LOAD Oct 2 19:24:43.171000 audit[2719]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000280468 items=0 ppid=2464 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:43.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638663837383766376334363766633534643933323961376665356266 Oct 2 19:24:43.193218 env[1059]: time="2023-10-02T19:24:43.193177578Z" level=info msg="StartContainer for \"68f8787f7c467fc54d9329a7fe5bfb17abeb8d289962bc71f8d34a3c1e0f02ba\" returns successfully" Oct 2 19:24:43.215035 systemd[1]: cri-containerd-68f8787f7c467fc54d9329a7fe5bfb17abeb8d289962bc71f8d34a3c1e0f02ba.scope: Deactivated successfully. Oct 2 19:24:43.217000 audit: BPF prog-id=138 op=UNLOAD Oct 2 19:24:43.338648 env[1059]: time="2023-10-02T19:24:43.338510325Z" level=info msg="shim disconnected" id=68f8787f7c467fc54d9329a7fe5bfb17abeb8d289962bc71f8d34a3c1e0f02ba Oct 2 19:24:43.338951 env[1059]: time="2023-10-02T19:24:43.338932554Z" level=warning msg="cleaning up after shim disconnected" id=68f8787f7c467fc54d9329a7fe5bfb17abeb8d289962bc71f8d34a3c1e0f02ba namespace=k8s.io Oct 2 19:24:43.339054 env[1059]: time="2023-10-02T19:24:43.339038835Z" level=info msg="cleaning up dead shim" Oct 2 19:24:43.348295 env[1059]: time="2023-10-02T19:24:43.348246834Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:24:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2761 runtime=io.containerd.runc.v2\n" Oct 2 19:24:44.092554 systemd[1]: run-containerd-runc-k8s.io-68f8787f7c467fc54d9329a7fe5bfb17abeb8d289962bc71f8d34a3c1e0f02ba-runc.aALVUz.mount: Deactivated successfully. Oct 2 19:24:44.092658 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-68f8787f7c467fc54d9329a7fe5bfb17abeb8d289962bc71f8d34a3c1e0f02ba-rootfs.mount: Deactivated successfully. Oct 2 19:24:44.290385 env[1059]: time="2023-10-02T19:24:44.290249864Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\"" Oct 2 19:24:45.992507 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2200330918.mount: Deactivated successfully. Oct 2 19:24:52.181361 env[1059]: time="2023-10-02T19:24:52.181293465Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:52.186540 env[1059]: time="2023-10-02T19:24:52.186470696Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:52.192037 env[1059]: time="2023-10-02T19:24:52.191969837Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:52.195821 env[1059]: time="2023-10-02T19:24:52.195757416Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:34bf454be8cd5b9a35ab29c2479ff68a26497c2c87eb606e4bfe57c7fbeeff35,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:24:52.197851 env[1059]: time="2023-10-02T19:24:52.197798182Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.25.0\" returns image reference \"sha256:d70a5947d57e5ab3340d126a38e6ae51bd9e8e0b342daa2012e78d8868bed5b7\"" Oct 2 19:24:52.203377 env[1059]: time="2023-10-02T19:24:52.203312660Z" level=info msg="CreateContainer within sandbox \"324d43550401cf37b5df95e7be0246d0fd2197e8bb32193e9eb354b2c9cb2437\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Oct 2 19:24:52.232139 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount594813459.mount: Deactivated successfully. Oct 2 19:24:52.253250 env[1059]: time="2023-10-02T19:24:52.253139685Z" level=info msg="CreateContainer within sandbox \"324d43550401cf37b5df95e7be0246d0fd2197e8bb32193e9eb354b2c9cb2437\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"9e9a4ef98a141b0d0dce272f5712cd93b313cd515885f9ca91692a85cf1e04ef\"" Oct 2 19:24:52.257540 env[1059]: time="2023-10-02T19:24:52.257480173Z" level=info msg="StartContainer for \"9e9a4ef98a141b0d0dce272f5712cd93b313cd515885f9ca91692a85cf1e04ef\"" Oct 2 19:24:52.305745 systemd[1]: Started cri-containerd-9e9a4ef98a141b0d0dce272f5712cd93b313cd515885f9ca91692a85cf1e04ef.scope. Oct 2 19:24:52.331000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.334502 kernel: kauditd_printk_skb: 97 callbacks suppressed Oct 2 19:24:52.334593 kernel: audit: type=1400 audit(1696274692.331:1152): avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.331000 audit[2781]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2464 pid=2781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:52.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965396134656639386131343162306430646365323732663537313263 Oct 2 19:24:52.348381 kernel: audit: type=1300 audit(1696274692.331:1152): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2464 pid=2781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:52.348456 kernel: audit: type=1327 audit(1696274692.331:1152): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965396134656639386131343162306430646365323732663537313263 Oct 2 19:24:52.331000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.352514 kernel: audit: type=1400 audit(1696274692.331:1153): avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.331000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.356478 kernel: audit: type=1400 audit(1696274692.331:1153): avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.356550 kernel: audit: type=1400 audit(1696274692.331:1153): avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.331000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.331000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.364263 kernel: audit: type=1400 audit(1696274692.331:1153): avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.331000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.368143 kernel: audit: type=1400 audit(1696274692.331:1153): avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.331000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.372252 kernel: audit: type=1400 audit(1696274692.331:1153): avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.331000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.331000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.331000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.331000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.331000 audit: BPF prog-id=139 op=LOAD Oct 2 19:24:52.331000 audit[2781]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000345ee0 items=0 ppid=2464 pid=2781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:52.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965396134656639386131343162306430646365323732663537313263 Oct 2 19:24:52.337000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.337000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.337000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.337000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.337000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.379889 kernel: audit: type=1400 audit(1696274692.331:1153): avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.337000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.337000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.337000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.337000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.337000 audit: BPF prog-id=140 op=LOAD Oct 2 19:24:52.337000 audit[2781]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000345f28 items=0 ppid=2464 pid=2781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:52.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965396134656639386131343162306430646365323732663537313263 Oct 2 19:24:52.347000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:24:52.347000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:24:52.347000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.347000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.347000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.347000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.347000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.347000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.347000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.347000 audit[2781]: AVC avc: denied { perfmon } for pid=2781 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.347000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.347000 audit[2781]: AVC avc: denied { bpf } for pid=2781 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:24:52.347000 audit: BPF prog-id=141 op=LOAD Oct 2 19:24:52.347000 audit[2781]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000345fb8 items=0 ppid=2464 pid=2781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:24:52.347000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965396134656639386131343162306430646365323732663537313263 Oct 2 19:24:52.405634 env[1059]: time="2023-10-02T19:24:52.405580339Z" level=info msg="StartContainer for \"9e9a4ef98a141b0d0dce272f5712cd93b313cd515885f9ca91692a85cf1e04ef\" returns successfully" Oct 2 19:24:54.244486 env[1059]: time="2023-10-02T19:24:54.244252571Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:24:54.248834 systemd[1]: cri-containerd-9e9a4ef98a141b0d0dce272f5712cd93b313cd515885f9ca91692a85cf1e04ef.scope: Deactivated successfully. Oct 2 19:24:54.253000 audit: BPF prog-id=141 op=UNLOAD Oct 2 19:24:54.296281 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9e9a4ef98a141b0d0dce272f5712cd93b313cd515885f9ca91692a85cf1e04ef-rootfs.mount: Deactivated successfully. Oct 2 19:24:54.337686 kubelet[1964]: I1002 19:24:54.337171 1964 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Oct 2 19:24:54.487174 env[1059]: time="2023-10-02T19:24:54.487075094Z" level=info msg="shim disconnected" id=9e9a4ef98a141b0d0dce272f5712cd93b313cd515885f9ca91692a85cf1e04ef Oct 2 19:24:54.487922 env[1059]: time="2023-10-02T19:24:54.487179650Z" level=warning msg="cleaning up after shim disconnected" id=9e9a4ef98a141b0d0dce272f5712cd93b313cd515885f9ca91692a85cf1e04ef namespace=k8s.io Oct 2 19:24:54.487922 env[1059]: time="2023-10-02T19:24:54.487207840Z" level=info msg="cleaning up dead shim" Oct 2 19:24:54.517599 env[1059]: time="2023-10-02T19:24:54.517397942Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:24:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2828 runtime=io.containerd.runc.v2\n" Oct 2 19:24:54.536823 kubelet[1964]: I1002 19:24:54.536768 1964 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:24:54.546012 systemd[1]: Created slice kubepods-burstable-pod7ecf6164_bedc_42af_8d48_225e2ed735d5.slice. Oct 2 19:24:54.548213 kubelet[1964]: I1002 19:24:54.548189 1964 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:24:54.549327 kubelet[1964]: I1002 19:24:54.549311 1964 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:24:54.556222 systemd[1]: Created slice kubepods-besteffort-pod8ba78cce_beab_4a7d_a696_087703409426.slice. Oct 2 19:24:54.560442 kubelet[1964]: I1002 19:24:54.560411 1964 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:24:54.567443 systemd[1]: Created slice kubepods-burstable-pod15addbe7_0532_4a24_88ac_35b8e1b61a7a.slice. Oct 2 19:24:54.572295 systemd[1]: Created slice kubepods-besteffort-pod483f9644_0527_42b0_9e55_0a552dc084ac.slice. Oct 2 19:24:54.689812 kubelet[1964]: I1002 19:24:54.689759 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/483f9644-0527-42b0-9e55-0a552dc084ac-socket-dir\") pod \"csi-node-driver-wnlh4\" (UID: \"483f9644-0527-42b0-9e55-0a552dc084ac\") " pod="calico-system/csi-node-driver-wnlh4" Oct 2 19:24:54.690040 kubelet[1964]: I1002 19:24:54.689999 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/15addbe7-0532-4a24-88ac-35b8e1b61a7a-config-volume\") pod \"coredns-787d4945fb-l946d\" (UID: \"15addbe7-0532-4a24-88ac-35b8e1b61a7a\") " pod="kube-system/coredns-787d4945fb-l946d" Oct 2 19:24:54.690233 kubelet[1964]: I1002 19:24:54.690190 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/483f9644-0527-42b0-9e55-0a552dc084ac-registration-dir\") pod \"csi-node-driver-wnlh4\" (UID: \"483f9644-0527-42b0-9e55-0a552dc084ac\") " pod="calico-system/csi-node-driver-wnlh4" Oct 2 19:24:54.690422 kubelet[1964]: I1002 19:24:54.690383 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/7ecf6164-bedc-42af-8d48-225e2ed735d5-config-volume\") pod \"coredns-787d4945fb-bs9gf\" (UID: \"7ecf6164-bedc-42af-8d48-225e2ed735d5\") " pod="kube-system/coredns-787d4945fb-bs9gf" Oct 2 19:24:54.690609 kubelet[1964]: I1002 19:24:54.690571 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zh6kf\" (UniqueName: \"kubernetes.io/projected/15addbe7-0532-4a24-88ac-35b8e1b61a7a-kube-api-access-zh6kf\") pod \"coredns-787d4945fb-l946d\" (UID: \"15addbe7-0532-4a24-88ac-35b8e1b61a7a\") " pod="kube-system/coredns-787d4945fb-l946d" Oct 2 19:24:54.690805 kubelet[1964]: I1002 19:24:54.690766 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9fvb7\" (UniqueName: \"kubernetes.io/projected/7ecf6164-bedc-42af-8d48-225e2ed735d5-kube-api-access-9fvb7\") pod \"coredns-787d4945fb-bs9gf\" (UID: \"7ecf6164-bedc-42af-8d48-225e2ed735d5\") " pod="kube-system/coredns-787d4945fb-bs9gf" Oct 2 19:24:54.691032 kubelet[1964]: I1002 19:24:54.690989 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8d7hl\" (UniqueName: \"kubernetes.io/projected/483f9644-0527-42b0-9e55-0a552dc084ac-kube-api-access-8d7hl\") pod \"csi-node-driver-wnlh4\" (UID: \"483f9644-0527-42b0-9e55-0a552dc084ac\") " pod="calico-system/csi-node-driver-wnlh4" Oct 2 19:24:54.691197 kubelet[1964]: I1002 19:24:54.691171 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9lqgp\" (UniqueName: \"kubernetes.io/projected/8ba78cce-beab-4a7d-a696-087703409426-kube-api-access-9lqgp\") pod \"calico-kube-controllers-69c848ddc6-9qp2f\" (UID: \"8ba78cce-beab-4a7d-a696-087703409426\") " pod="calico-system/calico-kube-controllers-69c848ddc6-9qp2f" Oct 2 19:24:54.691362 kubelet[1964]: I1002 19:24:54.691335 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etccalico\" (UniqueName: \"kubernetes.io/host-path/483f9644-0527-42b0-9e55-0a552dc084ac-etccalico\") pod \"csi-node-driver-wnlh4\" (UID: \"483f9644-0527-42b0-9e55-0a552dc084ac\") " pod="calico-system/csi-node-driver-wnlh4" Oct 2 19:24:54.691447 kubelet[1964]: I1002 19:24:54.691431 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/483f9644-0527-42b0-9e55-0a552dc084ac-varrun\") pod \"csi-node-driver-wnlh4\" (UID: \"483f9644-0527-42b0-9e55-0a552dc084ac\") " pod="calico-system/csi-node-driver-wnlh4" Oct 2 19:24:54.691685 kubelet[1964]: I1002 19:24:54.691583 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/483f9644-0527-42b0-9e55-0a552dc084ac-kubelet-dir\") pod \"csi-node-driver-wnlh4\" (UID: \"483f9644-0527-42b0-9e55-0a552dc084ac\") " pod="calico-system/csi-node-driver-wnlh4" Oct 2 19:24:54.869176 env[1059]: time="2023-10-02T19:24:54.868255262Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69c848ddc6-9qp2f,Uid:8ba78cce-beab-4a7d-a696-087703409426,Namespace:calico-system,Attempt:0,}" Oct 2 19:24:54.872186 env[1059]: time="2023-10-02T19:24:54.872121261Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-l946d,Uid:15addbe7-0532-4a24-88ac-35b8e1b61a7a,Namespace:kube-system,Attempt:0,}" Oct 2 19:24:55.076262 env[1059]: time="2023-10-02T19:24:55.076180137Z" level=error msg="Failed to destroy network for sandbox \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.078661 env[1059]: time="2023-10-02T19:24:55.078620137Z" level=error msg="encountered an error cleaning up failed sandbox \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.079446 env[1059]: time="2023-10-02T19:24:55.079413435Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69c848ddc6-9qp2f,Uid:8ba78cce-beab-4a7d-a696-087703409426,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.079848 kubelet[1964]: E1002 19:24:55.079818 1964 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.079985 kubelet[1964]: E1002 19:24:55.079910 1964 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-69c848ddc6-9qp2f" Oct 2 19:24:55.079985 kubelet[1964]: E1002 19:24:55.079940 1964 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-69c848ddc6-9qp2f" Oct 2 19:24:55.080066 kubelet[1964]: E1002 19:24:55.080005 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-69c848ddc6-9qp2f_calico-system(8ba78cce-beab-4a7d-a696-087703409426)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-69c848ddc6-9qp2f_calico-system(8ba78cce-beab-4a7d-a696-087703409426)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-69c848ddc6-9qp2f" podUID=8ba78cce-beab-4a7d-a696-087703409426 Oct 2 19:24:55.084930 env[1059]: time="2023-10-02T19:24:55.084876730Z" level=error msg="Failed to destroy network for sandbox \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.085248 env[1059]: time="2023-10-02T19:24:55.085216788Z" level=error msg="encountered an error cleaning up failed sandbox \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.085312 env[1059]: time="2023-10-02T19:24:55.085273419Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-l946d,Uid:15addbe7-0532-4a24-88ac-35b8e1b61a7a,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.086683 kubelet[1964]: E1002 19:24:55.085463 1964 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.086683 kubelet[1964]: E1002 19:24:55.085510 1964 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-l946d" Oct 2 19:24:55.086683 kubelet[1964]: E1002 19:24:55.085538 1964 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-l946d" Oct 2 19:24:55.087011 kubelet[1964]: E1002 19:24:55.085595 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-787d4945fb-l946d_kube-system(15addbe7-0532-4a24-88ac-35b8e1b61a7a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-787d4945fb-l946d_kube-system(15addbe7-0532-4a24-88ac-35b8e1b61a7a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-l946d" podUID=15addbe7-0532-4a24-88ac-35b8e1b61a7a Oct 2 19:24:55.158783 env[1059]: time="2023-10-02T19:24:55.158640579Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-bs9gf,Uid:7ecf6164-bedc-42af-8d48-225e2ed735d5,Namespace:kube-system,Attempt:0,}" Oct 2 19:24:55.176702 env[1059]: time="2023-10-02T19:24:55.176674228Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-wnlh4,Uid:483f9644-0527-42b0-9e55-0a552dc084ac,Namespace:calico-system,Attempt:0,}" Oct 2 19:24:55.281052 env[1059]: time="2023-10-02T19:24:55.280996682Z" level=error msg="Failed to destroy network for sandbox \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.281752 env[1059]: time="2023-10-02T19:24:55.281717350Z" level=error msg="encountered an error cleaning up failed sandbox \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.281914 env[1059]: time="2023-10-02T19:24:55.281847092Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-bs9gf,Uid:7ecf6164-bedc-42af-8d48-225e2ed735d5,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.282509 kubelet[1964]: E1002 19:24:55.282155 1964 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.282509 kubelet[1964]: E1002 19:24:55.282208 1964 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-bs9gf" Oct 2 19:24:55.282509 kubelet[1964]: E1002 19:24:55.282235 1964 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-787d4945fb-bs9gf" Oct 2 19:24:55.284119 kubelet[1964]: E1002 19:24:55.282294 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-787d4945fb-bs9gf_kube-system(7ecf6164-bedc-42af-8d48-225e2ed735d5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-787d4945fb-bs9gf_kube-system(7ecf6164-bedc-42af-8d48-225e2ed735d5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-bs9gf" podUID=7ecf6164-bedc-42af-8d48-225e2ed735d5 Oct 2 19:24:55.299014 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712-shm.mount: Deactivated successfully. Oct 2 19:24:55.317450 env[1059]: time="2023-10-02T19:24:55.317404420Z" level=error msg="Failed to destroy network for sandbox \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.319377 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745-shm.mount: Deactivated successfully. Oct 2 19:24:55.320587 env[1059]: time="2023-10-02T19:24:55.320551233Z" level=error msg="encountered an error cleaning up failed sandbox \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.320710 env[1059]: time="2023-10-02T19:24:55.320678731Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-wnlh4,Uid:483f9644-0527-42b0-9e55-0a552dc084ac,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.321008 kubelet[1964]: E1002 19:24:55.320973 1964 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.321080 kubelet[1964]: E1002 19:24:55.321051 1964 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-wnlh4" Oct 2 19:24:55.321134 kubelet[1964]: E1002 19:24:55.321111 1964 kuberuntime_manager.go:782] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-wnlh4" Oct 2 19:24:55.322904 kubelet[1964]: E1002 19:24:55.321422 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-wnlh4_calico-system(483f9644-0527-42b0-9e55-0a552dc084ac)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-wnlh4_calico-system(483f9644-0527-42b0-9e55-0a552dc084ac)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-wnlh4" podUID=483f9644-0527-42b0-9e55-0a552dc084ac Oct 2 19:24:55.335890 kubelet[1964]: I1002 19:24:55.335791 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Oct 2 19:24:55.337754 env[1059]: time="2023-10-02T19:24:55.337725057Z" level=info msg="StopPodSandbox for \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\"" Oct 2 19:24:55.339383 kubelet[1964]: I1002 19:24:55.339353 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Oct 2 19:24:55.340880 env[1059]: time="2023-10-02T19:24:55.340825929Z" level=info msg="StopPodSandbox for \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\"" Oct 2 19:24:55.346547 kubelet[1964]: I1002 19:24:55.345980 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Oct 2 19:24:55.347654 env[1059]: time="2023-10-02T19:24:55.347628236Z" level=info msg="StopPodSandbox for \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\"" Oct 2 19:24:55.352848 kubelet[1964]: I1002 19:24:55.352452 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Oct 2 19:24:55.353105 env[1059]: time="2023-10-02T19:24:55.353079818Z" level=info msg="StopPodSandbox for \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\"" Oct 2 19:24:55.358060 env[1059]: time="2023-10-02T19:24:55.358002657Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\"" Oct 2 19:24:55.420468 env[1059]: time="2023-10-02T19:24:55.420362565Z" level=error msg="StopPodSandbox for \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\" failed" error="failed to destroy network for sandbox \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.421672 kubelet[1964]: E1002 19:24:55.421504 1964 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Oct 2 19:24:55.421672 kubelet[1964]: E1002 19:24:55.421575 1964 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0} Oct 2 19:24:55.421672 kubelet[1964]: E1002 19:24:55.421617 1964 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7ecf6164-bedc-42af-8d48-225e2ed735d5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:24:55.421672 kubelet[1964]: E1002 19:24:55.421652 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7ecf6164-bedc-42af-8d48-225e2ed735d5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-bs9gf" podUID=7ecf6164-bedc-42af-8d48-225e2ed735d5 Oct 2 19:24:55.422057 env[1059]: time="2023-10-02T19:24:55.422010660Z" level=error msg="StopPodSandbox for \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\" failed" error="failed to destroy network for sandbox \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.422613 kubelet[1964]: E1002 19:24:55.422491 1964 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Oct 2 19:24:55.422613 kubelet[1964]: E1002 19:24:55.422516 1964 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e} Oct 2 19:24:55.422613 kubelet[1964]: E1002 19:24:55.422566 1964 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"15addbe7-0532-4a24-88ac-35b8e1b61a7a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:24:55.422613 kubelet[1964]: E1002 19:24:55.422598 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"15addbe7-0532-4a24-88ac-35b8e1b61a7a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-787d4945fb-l946d" podUID=15addbe7-0532-4a24-88ac-35b8e1b61a7a Oct 2 19:24:55.426255 env[1059]: time="2023-10-02T19:24:55.426198816Z" level=error msg="StopPodSandbox for \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\" failed" error="failed to destroy network for sandbox \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.426528 kubelet[1964]: E1002 19:24:55.426503 1964 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Oct 2 19:24:55.426598 kubelet[1964]: E1002 19:24:55.426563 1964 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712} Oct 2 19:24:55.426638 kubelet[1964]: E1002 19:24:55.426610 1964 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8ba78cce-beab-4a7d-a696-087703409426\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:24:55.426702 kubelet[1964]: E1002 19:24:55.426667 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8ba78cce-beab-4a7d-a696-087703409426\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-69c848ddc6-9qp2f" podUID=8ba78cce-beab-4a7d-a696-087703409426 Oct 2 19:24:55.437868 env[1059]: time="2023-10-02T19:24:55.437796062Z" level=error msg="StopPodSandbox for \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\" failed" error="failed to destroy network for sandbox \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Oct 2 19:24:55.438101 kubelet[1964]: E1002 19:24:55.438066 1964 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Oct 2 19:24:55.438172 kubelet[1964]: E1002 19:24:55.438118 1964 kuberuntime_manager.go:965] "Failed to stop sandbox" podSandboxID={Type:containerd ID:9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745} Oct 2 19:24:55.438172 kubelet[1964]: E1002 19:24:55.438161 1964 kuberuntime_manager.go:705] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"483f9644-0527-42b0-9e55-0a552dc084ac\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Oct 2 19:24:55.438270 kubelet[1964]: E1002 19:24:55.438219 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"483f9644-0527-42b0-9e55-0a552dc084ac\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-wnlh4" podUID=483f9644-0527-42b0-9e55-0a552dc084ac Oct 2 19:25:02.834207 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3461628723.mount: Deactivated successfully. Oct 2 19:25:02.948405 env[1059]: time="2023-10-02T19:25:02.948293490Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:02.951512 env[1059]: time="2023-10-02T19:25:02.951441324Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:02.954521 env[1059]: time="2023-10-02T19:25:02.954457680Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:02.957250 env[1059]: time="2023-10-02T19:25:02.957181854Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e898f4b7b55c908c88dad008ae939024e71ed93c5effbb10cca891b658b2f001,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:02.958259 env[1059]: time="2023-10-02T19:25:02.958196469Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.25.0\" returns image reference \"sha256:08616d26b8e74867402274687491e5978ba4a6ded94e9f5ecc3e364024e5683e\"" Oct 2 19:25:02.965242 env[1059]: time="2023-10-02T19:25:02.965146129Z" level=info msg="CreateContainer within sandbox \"324d43550401cf37b5df95e7be0246d0fd2197e8bb32193e9eb354b2c9cb2437\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Oct 2 19:25:02.991938 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount707544353.mount: Deactivated successfully. Oct 2 19:25:03.005408 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2640091442.mount: Deactivated successfully. Oct 2 19:25:03.019079 env[1059]: time="2023-10-02T19:25:03.019013973Z" level=info msg="CreateContainer within sandbox \"324d43550401cf37b5df95e7be0246d0fd2197e8bb32193e9eb354b2c9cb2437\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"b5d80e716537a62e9600393e457ae0dac07cc9ebe425c5ae443cb179bc1ffe7a\"" Oct 2 19:25:03.023041 env[1059]: time="2023-10-02T19:25:03.020749756Z" level=info msg="StartContainer for \"b5d80e716537a62e9600393e457ae0dac07cc9ebe425c5ae443cb179bc1ffe7a\"" Oct 2 19:25:03.061699 systemd[1]: Started cri-containerd-b5d80e716537a62e9600393e457ae0dac07cc9ebe425c5ae443cb179bc1ffe7a.scope. Oct 2 19:25:03.090000 audit[3063]: AVC avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.093043 kernel: kauditd_printk_skb: 34 callbacks suppressed Oct 2 19:25:03.093111 kernel: audit: type=1400 audit(1696274703.090:1159): avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.097068 kernel: audit: type=1300 audit(1696274703.090:1159): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2464 pid=3063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:03.090000 audit[3063]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2464 pid=3063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:03.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235643830653731363533376136326539363030333933653435376165 Oct 2 19:25:03.107368 kernel: audit: type=1327 audit(1696274703.090:1159): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235643830653731363533376136326539363030333933653435376165 Oct 2 19:25:03.090000 audit[3063]: AVC avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.110987 kernel: audit: type=1400 audit(1696274703.090:1160): avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.090000 audit[3063]: AVC avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.114459 kernel: audit: type=1400 audit(1696274703.090:1160): avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.120944 kernel: audit: type=1400 audit(1696274703.090:1160): avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.121118 kernel: audit: type=1400 audit(1696274703.090:1160): avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.090000 audit[3063]: AVC avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.090000 audit[3063]: AVC avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.090000 audit[3063]: AVC avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.090000 audit[3063]: AVC avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.128724 kernel: audit: type=1400 audit(1696274703.090:1160): avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.128791 kernel: audit: type=1400 audit(1696274703.090:1160): avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.090000 audit[3063]: AVC avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.133262 kernel: audit: type=1400 audit(1696274703.090:1160): avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.090000 audit[3063]: AVC avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.090000 audit[3063]: AVC avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.090000 audit[3063]: AVC avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.090000 audit: BPF prog-id=142 op=LOAD Oct 2 19:25:03.090000 audit[3063]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c00031e2f0 items=0 ppid=2464 pid=3063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:03.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235643830653731363533376136326539363030333933653435376165 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit: BPF prog-id=143 op=LOAD Oct 2 19:25:03.095000 audit[3063]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c00031e338 items=0 ppid=2464 pid=3063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:03.095000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235643830653731363533376136326539363030333933653435376165 Oct 2 19:25:03.095000 audit: BPF prog-id=143 op=UNLOAD Oct 2 19:25:03.095000 audit: BPF prog-id=142 op=UNLOAD Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { perfmon } for pid=3063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit[3063]: AVC avc: denied { bpf } for pid=3063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:03.095000 audit: BPF prog-id=144 op=LOAD Oct 2 19:25:03.095000 audit[3063]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c00031e3c8 items=0 ppid=2464 pid=3063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:03.095000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235643830653731363533376136326539363030333933653435376165 Oct 2 19:25:03.150561 env[1059]: time="2023-10-02T19:25:03.150503985Z" level=info msg="StartContainer for \"b5d80e716537a62e9600393e457ae0dac07cc9ebe425c5ae443cb179bc1ffe7a\" returns successfully" Oct 2 19:25:03.264704 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Oct 2 19:25:03.265068 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Oct 2 19:25:04.420579 systemd[1]: run-containerd-runc-k8s.io-b5d80e716537a62e9600393e457ae0dac07cc9ebe425c5ae443cb179bc1ffe7a-runc.rnBOup.mount: Deactivated successfully. Oct 2 19:25:04.720000 audit[3228]: AVC avc: denied { write } for pid=3228 comm="tee" name="fd" dev="proc" ino=27038 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:25:04.720000 audit[3228]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff66940961 a2=241 a3=1b6 items=1 ppid=3202 pid=3228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:04.720000 audit: CWD cwd="/etc/service/enabled/bird6/log" Oct 2 19:25:04.720000 audit: PATH item=0 name="/dev/fd/63" inode=26364 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:25:04.720000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:25:04.725000 audit[3233]: AVC avc: denied { write } for pid=3233 comm="tee" name="fd" dev="proc" ino=26383 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:25:04.725000 audit[3233]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd4a11a952 a2=241 a3=1b6 items=1 ppid=3194 pid=3233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:04.725000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Oct 2 19:25:04.728000 audit[3240]: AVC avc: denied { write } for pid=3240 comm="tee" name="fd" dev="proc" ino=26387 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:25:04.728000 audit[3240]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc729aa961 a2=241 a3=1b6 items=1 ppid=3204 pid=3240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:04.728000 audit: CWD cwd="/etc/service/enabled/confd/log" Oct 2 19:25:04.728000 audit: PATH item=0 name="/dev/fd/63" inode=26380 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:25:04.725000 audit: PATH item=0 name="/dev/fd/63" inode=27029 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:25:04.725000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:25:04.728000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:25:04.753000 audit[3246]: AVC avc: denied { write } for pid=3246 comm="tee" name="fd" dev="proc" ino=26397 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:25:04.753000 audit[3246]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc1457f951 a2=241 a3=1b6 items=1 ppid=3189 pid=3246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:04.753000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Oct 2 19:25:04.753000 audit: PATH item=0 name="/dev/fd/63" inode=27043 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:25:04.754000 audit[3236]: AVC avc: denied { write } for pid=3236 comm="tee" name="fd" dev="proc" ino=27052 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:25:04.754000 audit[3236]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffbedc6962 a2=241 a3=1b6 items=1 ppid=3213 pid=3236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:04.754000 audit: CWD cwd="/etc/service/enabled/bird/log" Oct 2 19:25:04.754000 audit: PATH item=0 name="/dev/fd/63" inode=26377 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:25:04.754000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:25:04.762000 audit[3230]: AVC avc: denied { write } for pid=3230 comm="tee" name="fd" dev="proc" ino=26404 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:25:04.762000 audit[3230]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffce1051961 a2=241 a3=1b6 items=1 ppid=3197 pid=3230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:04.753000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:25:04.762000 audit: CWD cwd="/etc/service/enabled/felix/log" Oct 2 19:25:04.762000 audit: PATH item=0 name="/dev/fd/63" inode=27028 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:25:04.762000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:25:04.776000 audit[3263]: AVC avc: denied { write } for pid=3263 comm="tee" name="fd" dev="proc" ino=26410 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Oct 2 19:25:04.776000 audit[3263]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc41ebf963 a2=241 a3=1b6 items=1 ppid=3200 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:04.776000 audit: CWD cwd="/etc/service/enabled/cni/log" Oct 2 19:25:04.776000 audit: PATH item=0 name="/dev/fd/63" inode=27054 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:25:04.776000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Oct 2 19:25:04.834277 systemd[1]: run-containerd-runc-k8s.io-b5d80e716537a62e9600393e457ae0dac07cc9ebe425c5ae443cb179bc1ffe7a-runc.u7pEe2.mount: Deactivated successfully. Oct 2 19:25:05.503000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.503000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.503000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.503000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.503000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.503000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.503000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.503000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.503000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.503000 audit: BPF prog-id=145 op=LOAD Oct 2 19:25:05.503000 audit[3333]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd5af07ca0 a2=70 a3=7fbd6a2b8000 items=0 ppid=3198 pid=3333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:05.503000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:25:05.503000 audit: BPF prog-id=145 op=UNLOAD Oct 2 19:25:05.504000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.504000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.504000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.504000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.504000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.504000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.504000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.504000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.504000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.504000 audit: BPF prog-id=146 op=LOAD Oct 2 19:25:05.504000 audit[3333]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd5af07ca0 a2=70 a3=6e items=0 ppid=3198 pid=3333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:05.504000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:25:05.506000 audit: BPF prog-id=146 op=UNLOAD Oct 2 19:25:05.506000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.506000 audit[3333]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffd5af07c50 a2=70 a3=470860 items=0 ppid=3198 pid=3333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:05.506000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:25:05.507000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.507000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.507000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.507000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.507000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.507000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.507000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.507000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.507000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.507000 audit: BPF prog-id=147 op=LOAD Oct 2 19:25:05.507000 audit[3333]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd5af07c30 a2=70 a3=7ffd5af07ca0 items=0 ppid=3198 pid=3333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:05.507000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:25:05.508000 audit: BPF prog-id=147 op=UNLOAD Oct 2 19:25:05.508000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.508000 audit[3333]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd5af07d10 a2=70 a3=0 items=0 ppid=3198 pid=3333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:05.508000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:25:05.508000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.508000 audit[3333]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd5af07d00 a2=70 a3=0 items=0 ppid=3198 pid=3333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:05.508000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:25:05.508000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.508000 audit[3333]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffd5af07d40 a2=70 a3=fe00 items=0 ppid=3198 pid=3333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:05.508000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:25:05.509000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.509000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.509000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.509000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.509000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.509000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.509000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.509000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.509000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.509000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.509000 audit: BPF prog-id=148 op=LOAD Oct 2 19:25:05.509000 audit[3333]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd5af07c60 a2=70 a3=ffffffff items=0 ppid=3198 pid=3333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:05.509000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Oct 2 19:25:05.515000 audit[3336]: AVC avc: denied { bpf } for pid=3336 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.515000 audit[3336]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffce62f6060 a2=70 a3=ffff items=0 ppid=3198 pid=3336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:05.515000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:25:05.515000 audit[3336]: AVC avc: denied { bpf } for pid=3336 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:05.515000 audit[3336]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffce62f5f30 a2=70 a3=3 items=0 ppid=3198 pid=3336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:05.515000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Oct 2 19:25:05.534000 audit: BPF prog-id=148 op=UNLOAD Oct 2 19:25:05.670000 audit[3359]: NETFILTER_CFG table=raw:113 family=2 entries=19 op=nft_register_chain pid=3359 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:25:05.670000 audit[3359]: SYSCALL arch=c000003e syscall=46 success=yes exit=6132 a0=3 a1=7ffcf0d29650 a2=0 a3=7ffcf0d2963c items=0 ppid=3198 pid=3359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:05.670000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:25:05.686000 audit[3362]: NETFILTER_CFG table=mangle:114 family=2 entries=19 op=nft_register_chain pid=3362 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:25:05.686000 audit[3362]: SYSCALL arch=c000003e syscall=46 success=yes exit=6800 a0=3 a1=7ffd31d58a40 a2=0 a3=7ffd31d58a2c items=0 ppid=3198 pid=3362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:05.686000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:25:05.691000 audit[3360]: NETFILTER_CFG table=nat:115 family=2 entries=16 op=nft_register_chain pid=3360 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:25:05.691000 audit[3360]: SYSCALL arch=c000003e syscall=46 success=yes exit=5188 a0=3 a1=7ffecf59b2e0 a2=0 a3=0 items=0 ppid=3198 pid=3360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:05.691000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:25:05.702000 audit[3363]: NETFILTER_CFG table=filter:116 family=2 entries=39 op=nft_register_chain pid=3363 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:25:05.702000 audit[3363]: SYSCALL arch=c000003e syscall=46 success=yes exit=18472 a0=3 a1=7ffdd8464250 a2=0 a3=0 items=0 ppid=3198 pid=3363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:05.702000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:25:06.156881 env[1059]: time="2023-10-02T19:25:06.156759037Z" level=info msg="StopPodSandbox for \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\"" Oct 2 19:25:06.251258 systemd-networkd[974]: vxlan.calico: Link UP Oct 2 19:25:06.251278 systemd-networkd[974]: vxlan.calico: Gained carrier Oct 2 19:25:06.319109 kubelet[1964]: I1002 19:25:06.319057 1964 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-skxdq" podStartSLOduration=-9.223372004540474e+09 pod.CreationTimestamp="2023-10-02 19:24:34 +0000 UTC" firstStartedPulling="2023-10-02 19:24:34.938025892 +0000 UTC m=+21.002723757" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:25:03.408574462 +0000 UTC m=+49.473272327" watchObservedRunningTime="2023-10-02 19:25:06.314302616 +0000 UTC m=+52.379000511" Oct 2 19:25:06.661570 env[1059]: 2023-10-02 19:25:06.312 [INFO][3385] k8s.go 576: Cleaning up netns ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Oct 2 19:25:06.661570 env[1059]: 2023-10-02 19:25:06.316 [INFO][3385] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" iface="eth0" netns="/var/run/netns/cni-7b4c911e-8f6d-5155-87b6-1109781f5f5b" Oct 2 19:25:06.661570 env[1059]: 2023-10-02 19:25:06.317 [INFO][3385] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" iface="eth0" netns="/var/run/netns/cni-7b4c911e-8f6d-5155-87b6-1109781f5f5b" Oct 2 19:25:06.661570 env[1059]: 2023-10-02 19:25:06.319 [INFO][3385] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" iface="eth0" netns="/var/run/netns/cni-7b4c911e-8f6d-5155-87b6-1109781f5f5b" Oct 2 19:25:06.661570 env[1059]: 2023-10-02 19:25:06.319 [INFO][3385] k8s.go 583: Releasing IP address(es) ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Oct 2 19:25:06.661570 env[1059]: 2023-10-02 19:25:06.319 [INFO][3385] utils.go 196: Calico CNI releasing IP address ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Oct 2 19:25:06.661570 env[1059]: 2023-10-02 19:25:06.593 [INFO][3393] ipam_plugin.go 416: Releasing address using handleID ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" HandleID="k8s-pod-network.9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" Oct 2 19:25:06.661570 env[1059]: time="2023-10-02T19:25:06Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:06.661570 env[1059]: time="2023-10-02T19:25:06Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:06.661570 env[1059]: 2023-10-02 19:25:06.646 [WARNING][3393] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" HandleID="k8s-pod-network.9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" Oct 2 19:25:06.661570 env[1059]: 2023-10-02 19:25:06.647 [INFO][3393] ipam_plugin.go 444: Releasing address using workloadID ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" HandleID="k8s-pod-network.9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" Oct 2 19:25:06.661570 env[1059]: time="2023-10-02T19:25:06Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:06.661570 env[1059]: 2023-10-02 19:25:06.655 [INFO][3385] k8s.go 589: Teardown processing complete. ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Oct 2 19:25:06.670672 env[1059]: time="2023-10-02T19:25:06.668723273Z" level=info msg="TearDown network for sandbox \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\" successfully" Oct 2 19:25:06.670672 env[1059]: time="2023-10-02T19:25:06.668788342Z" level=info msg="StopPodSandbox for \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\" returns successfully" Oct 2 19:25:06.667394 systemd[1]: run-netns-cni\x2d7b4c911e\x2d8f6d\x2d5155\x2d87b6\x2d1109781f5f5b.mount: Deactivated successfully. Oct 2 19:25:06.689153 env[1059]: time="2023-10-02T19:25:06.689069973Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-wnlh4,Uid:483f9644-0527-42b0-9e55-0a552dc084ac,Namespace:calico-system,Attempt:1,}" Oct 2 19:25:06.875315 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:25:06.875427 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif6a8a00b309: link becomes ready Oct 2 19:25:06.880476 systemd-networkd[974]: calif6a8a00b309: Link UP Oct 2 19:25:06.880483 systemd-networkd[974]: calif6a8a00b309: Gained carrier Oct 2 19:25:06.916794 env[1059]: 2023-10-02 19:25:06.783 [INFO][3411] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0 csi-node-driver- calico-system 483f9644-0527-42b0-9e55-0a552dc084ac 676 0 2023-10-02 19:24:54 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:5877dcb8f5 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ci-3510-3-0-4-c08ee46f57.novalocal csi-node-driver-wnlh4 eth0 default [] [] [kns.calico-system ksa.calico-system.default] calif6a8a00b309 [] []}} ContainerID="4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" Namespace="calico-system" Pod="csi-node-driver-wnlh4" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-" Oct 2 19:25:06.916794 env[1059]: 2023-10-02 19:25:06.784 [INFO][3411] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" Namespace="calico-system" Pod="csi-node-driver-wnlh4" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" Oct 2 19:25:06.916794 env[1059]: 2023-10-02 19:25:06.816 [INFO][3423] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" HandleID="k8s-pod-network.4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" Oct 2 19:25:06.916794 env[1059]: 2023-10-02 19:25:06.829 [INFO][3423] ipam_plugin.go 269: Auto assigning IP ContainerID="4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" HandleID="k8s-pod-network.4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00010a710), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510-3-0-4-c08ee46f57.novalocal", "pod":"csi-node-driver-wnlh4", "timestamp":"2023-10-02 19:25:06.816459128 +0000 UTC"}, Hostname:"ci-3510-3-0-4-c08ee46f57.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:25:06.916794 env[1059]: time="2023-10-02T19:25:06Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:06.916794 env[1059]: time="2023-10-02T19:25:06Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:06.916794 env[1059]: 2023-10-02 19:25:06.829 [INFO][3423] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-4-c08ee46f57.novalocal' Oct 2 19:25:06.916794 env[1059]: 2023-10-02 19:25:06.835 [INFO][3423] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:06.916794 env[1059]: 2023-10-02 19:25:06.846 [INFO][3423] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:06.916794 env[1059]: 2023-10-02 19:25:06.850 [INFO][3423] ipam.go 489: Trying affinity for 192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:06.916794 env[1059]: 2023-10-02 19:25:06.853 [INFO][3423] ipam.go 155: Attempting to load block cidr=192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:06.916794 env[1059]: 2023-10-02 19:25:06.855 [INFO][3423] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:06.916794 env[1059]: 2023-10-02 19:25:06.855 [INFO][3423] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.122.64/26 handle="k8s-pod-network.4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:06.916794 env[1059]: 2023-10-02 19:25:06.857 [INFO][3423] ipam.go 1682: Creating new handle: k8s-pod-network.4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5 Oct 2 19:25:06.916794 env[1059]: 2023-10-02 19:25:06.862 [INFO][3423] ipam.go 1203: Writing block in order to claim IPs block=192.168.122.64/26 handle="k8s-pod-network.4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:06.916794 env[1059]: 2023-10-02 19:25:06.868 [INFO][3423] ipam.go 1216: Successfully claimed IPs: [192.168.122.65/26] block=192.168.122.64/26 handle="k8s-pod-network.4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:06.916794 env[1059]: 2023-10-02 19:25:06.869 [INFO][3423] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.122.65/26] handle="k8s-pod-network.4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:06.916794 env[1059]: time="2023-10-02T19:25:06Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:06.916794 env[1059]: 2023-10-02 19:25:06.869 [INFO][3423] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.122.65/26] IPv6=[] ContainerID="4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" HandleID="k8s-pod-network.4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" Oct 2 19:25:06.917525 env[1059]: 2023-10-02 19:25:06.871 [INFO][3411] k8s.go 383: Populated endpoint ContainerID="4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" Namespace="calico-system" Pod="csi-node-driver-wnlh4" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"483f9644-0527-42b0-9e55-0a552dc084ac", ResourceVersion:"676", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"", Pod:"csi-node-driver-wnlh4", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.122.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calif6a8a00b309", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:06.917525 env[1059]: 2023-10-02 19:25:06.872 [INFO][3411] k8s.go 384: Calico CNI using IPs: [192.168.122.65/32] ContainerID="4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" Namespace="calico-system" Pod="csi-node-driver-wnlh4" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" Oct 2 19:25:06.917525 env[1059]: 2023-10-02 19:25:06.872 [INFO][3411] dataplane_linux.go 68: Setting the host side veth name to calif6a8a00b309 ContainerID="4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" Namespace="calico-system" Pod="csi-node-driver-wnlh4" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" Oct 2 19:25:06.917525 env[1059]: 2023-10-02 19:25:06.875 [INFO][3411] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" Namespace="calico-system" Pod="csi-node-driver-wnlh4" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" Oct 2 19:25:06.917525 env[1059]: 2023-10-02 19:25:06.881 [INFO][3411] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" Namespace="calico-system" Pod="csi-node-driver-wnlh4" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"483f9644-0527-42b0-9e55-0a552dc084ac", ResourceVersion:"676", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5", Pod:"csi-node-driver-wnlh4", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.122.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calif6a8a00b309", MAC:"1a:1e:70:24:3e:6f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:06.917525 env[1059]: 2023-10-02 19:25:06.914 [INFO][3411] k8s.go 489: Wrote updated endpoint to datastore ContainerID="4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5" Namespace="calico-system" Pod="csi-node-driver-wnlh4" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" Oct 2 19:25:06.939672 env[1059]: time="2023-10-02T19:25:06.939494720Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:06.939672 env[1059]: time="2023-10-02T19:25:06.939539722Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:06.939672 env[1059]: time="2023-10-02T19:25:06.939553147Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:06.939960 env[1059]: time="2023-10-02T19:25:06.939907847Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5 pid=3453 runtime=io.containerd.runc.v2 Oct 2 19:25:06.954000 audit[3469]: NETFILTER_CFG table=filter:117 family=2 entries=36 op=nft_register_chain pid=3469 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:25:06.954000 audit[3469]: SYSCALL arch=c000003e syscall=46 success=yes exit=19908 a0=3 a1=7ffed79de5c0 a2=0 a3=7ffed79de5ac items=0 ppid=3198 pid=3469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:06.954000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:25:06.967178 systemd[1]: Started cri-containerd-4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5.scope. Oct 2 19:25:06.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.987000 audit: BPF prog-id=149 op=LOAD Oct 2 19:25:06.988000 audit[3463]: AVC avc: denied { bpf } for pid=3463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.988000 audit[3463]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3453 pid=3463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:06.988000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434353566393337306134663764336130643264386462373837386465 Oct 2 19:25:06.989000 audit[3463]: AVC avc: denied { perfmon } for pid=3463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.989000 audit[3463]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3453 pid=3463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:06.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434353566393337306134663764336130643264386462373837386465 Oct 2 19:25:06.989000 audit[3463]: AVC avc: denied { bpf } for pid=3463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.989000 audit[3463]: AVC avc: denied { bpf } for pid=3463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.989000 audit[3463]: AVC avc: denied { bpf } for pid=3463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.989000 audit[3463]: AVC avc: denied { perfmon } for pid=3463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.989000 audit[3463]: AVC avc: denied { perfmon } for pid=3463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.989000 audit[3463]: AVC avc: denied { perfmon } for pid=3463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.989000 audit[3463]: AVC avc: denied { perfmon } for pid=3463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.989000 audit[3463]: AVC avc: denied { perfmon } for pid=3463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.989000 audit[3463]: AVC avc: denied { bpf } for pid=3463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.989000 audit[3463]: AVC avc: denied { bpf } for pid=3463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.989000 audit: BPF prog-id=150 op=LOAD Oct 2 19:25:06.989000 audit[3463]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003087e0 items=0 ppid=3453 pid=3463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:06.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434353566393337306134663764336130643264386462373837386465 Oct 2 19:25:06.990000 audit[3463]: AVC avc: denied { bpf } for pid=3463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.990000 audit[3463]: AVC avc: denied { bpf } for pid=3463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.990000 audit[3463]: AVC avc: denied { perfmon } for pid=3463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.990000 audit[3463]: AVC avc: denied { perfmon } for pid=3463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.990000 audit[3463]: AVC avc: denied { perfmon } for pid=3463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.990000 audit[3463]: AVC avc: denied { perfmon } for pid=3463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.990000 audit[3463]: AVC avc: denied { perfmon } for pid=3463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.990000 audit[3463]: AVC avc: denied { bpf } for pid=3463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.990000 audit[3463]: AVC avc: denied { bpf } for pid=3463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.990000 audit: BPF prog-id=151 op=LOAD Oct 2 19:25:06.990000 audit[3463]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000308828 items=0 ppid=3453 pid=3463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:06.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434353566393337306134663764336130643264386462373837386465 Oct 2 19:25:06.991000 audit: BPF prog-id=151 op=UNLOAD Oct 2 19:25:06.991000 audit: BPF prog-id=150 op=UNLOAD Oct 2 19:25:06.991000 audit[3463]: AVC avc: denied { bpf } for pid=3463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.991000 audit[3463]: AVC avc: denied { bpf } for pid=3463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.991000 audit[3463]: AVC avc: denied { bpf } for pid=3463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.991000 audit[3463]: AVC avc: denied { perfmon } for pid=3463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.991000 audit[3463]: AVC avc: denied { perfmon } for pid=3463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.991000 audit[3463]: AVC avc: denied { perfmon } for pid=3463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.991000 audit[3463]: AVC avc: denied { perfmon } for pid=3463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.991000 audit[3463]: AVC avc: denied { perfmon } for pid=3463 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.991000 audit[3463]: AVC avc: denied { bpf } for pid=3463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.991000 audit[3463]: AVC avc: denied { bpf } for pid=3463 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:06.991000 audit: BPF prog-id=152 op=LOAD Oct 2 19:25:06.991000 audit[3463]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000308c38 items=0 ppid=3453 pid=3463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:06.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434353566393337306134663764336130643264386462373837386465 Oct 2 19:25:07.008006 env[1059]: time="2023-10-02T19:25:07.007965390Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-wnlh4,Uid:483f9644-0527-42b0-9e55-0a552dc084ac,Namespace:calico-system,Attempt:1,} returns sandbox id \"4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5\"" Oct 2 19:25:07.009893 env[1059]: time="2023-10-02T19:25:07.009833312Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:25:07.260424 env[1059]: time="2023-10-02T19:25:07.260180898Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:25:07.264822 env[1059]: time="2023-10-02T19:25:07.263092648Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:25:07.265617 kubelet[1964]: E1002 19:25:07.265554 1964 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:25:07.265814 kubelet[1964]: E1002 19:25:07.265737 1964 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:25:07.270244 kubelet[1964]: E1002 19:25:07.270137 1964 kuberuntime_manager.go:872] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-8d7hl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-wnlh4_calico-system(483f9644-0527-42b0-9e55-0a552dc084ac): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:25:07.272187 env[1059]: time="2023-10-02T19:25:07.272126255Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:25:07.541932 env[1059]: time="2023-10-02T19:25:07.541455414Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:25:07.544760 env[1059]: time="2023-10-02T19:25:07.544622722Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:25:07.545278 kubelet[1964]: E1002 19:25:07.545213 1964 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:25:07.545931 kubelet[1964]: E1002 19:25:07.545329 1964 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:25:07.545931 kubelet[1964]: E1002 19:25:07.545577 1964 kuberuntime_manager.go:872] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8d7hl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-wnlh4_calico-system(483f9644-0527-42b0-9e55-0a552dc084ac): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:25:07.545931 kubelet[1964]: E1002 19:25:07.545766 1964 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-wnlh4" podUID=483f9644-0527-42b0-9e55-0a552dc084ac Oct 2 19:25:07.687000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:07.687000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0028e1c80 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:25:07.687000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:07.687000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525624 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:07.687000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001758cc0 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:25:07.687000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:07.691269 systemd-networkd[974]: vxlan.calico: Gained IPv6LL Oct 2 19:25:08.156309 env[1059]: time="2023-10-02T19:25:08.156238983Z" level=info msg="StopPodSandbox for \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\"" Oct 2 19:25:08.160906 env[1059]: time="2023-10-02T19:25:08.160604928Z" level=info msg="StopPodSandbox for \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\"" Oct 2 19:25:08.408952 kubelet[1964]: E1002 19:25:08.408843 1964 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-wnlh4" podUID=483f9644-0527-42b0-9e55-0a552dc084ac Oct 2 19:25:08.488106 env[1059]: 2023-10-02 19:25:08.387 [INFO][3527] k8s.go 576: Cleaning up netns ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Oct 2 19:25:08.488106 env[1059]: 2023-10-02 19:25:08.387 [INFO][3527] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" iface="eth0" netns="/var/run/netns/cni-3242f1a8-6938-8221-4b27-5b545efbc8f7" Oct 2 19:25:08.488106 env[1059]: 2023-10-02 19:25:08.387 [INFO][3527] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" iface="eth0" netns="/var/run/netns/cni-3242f1a8-6938-8221-4b27-5b545efbc8f7" Oct 2 19:25:08.488106 env[1059]: 2023-10-02 19:25:08.387 [INFO][3527] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" iface="eth0" netns="/var/run/netns/cni-3242f1a8-6938-8221-4b27-5b545efbc8f7" Oct 2 19:25:08.488106 env[1059]: 2023-10-02 19:25:08.387 [INFO][3527] k8s.go 583: Releasing IP address(es) ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Oct 2 19:25:08.488106 env[1059]: 2023-10-02 19:25:08.387 [INFO][3527] utils.go 196: Calico CNI releasing IP address ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Oct 2 19:25:08.488106 env[1059]: 2023-10-02 19:25:08.443 [INFO][3540] ipam_plugin.go 416: Releasing address using handleID ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" HandleID="k8s-pod-network.14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" Oct 2 19:25:08.488106 env[1059]: time="2023-10-02T19:25:08Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:08.488106 env[1059]: time="2023-10-02T19:25:08Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:08.488106 env[1059]: 2023-10-02 19:25:08.465 [WARNING][3540] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" HandleID="k8s-pod-network.14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" Oct 2 19:25:08.488106 env[1059]: 2023-10-02 19:25:08.465 [INFO][3540] ipam_plugin.go 444: Releasing address using workloadID ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" HandleID="k8s-pod-network.14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" Oct 2 19:25:08.488106 env[1059]: time="2023-10-02T19:25:08Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:08.488106 env[1059]: 2023-10-02 19:25:08.484 [INFO][3527] k8s.go 589: Teardown processing complete. ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Oct 2 19:25:08.489819 systemd[1]: run-netns-cni\x2d3242f1a8\x2d6938\x2d8221\x2d4b27\x2d5b545efbc8f7.mount: Deactivated successfully. Oct 2 19:25:08.491063 env[1059]: time="2023-10-02T19:25:08.490627275Z" level=info msg="TearDown network for sandbox \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\" successfully" Oct 2 19:25:08.491063 env[1059]: time="2023-10-02T19:25:08.490663462Z" level=info msg="StopPodSandbox for \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\" returns successfully" Oct 2 19:25:08.491699 env[1059]: time="2023-10-02T19:25:08.491453395Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-bs9gf,Uid:7ecf6164-bedc-42af-8d48-225e2ed735d5,Namespace:kube-system,Attempt:1,}" Oct 2 19:25:08.514299 env[1059]: 2023-10-02 19:25:08.440 [INFO][3528] k8s.go 576: Cleaning up netns ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Oct 2 19:25:08.514299 env[1059]: 2023-10-02 19:25:08.440 [INFO][3528] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" iface="eth0" netns="/var/run/netns/cni-c789f3e3-ef8f-230a-da85-4b6a768d794e" Oct 2 19:25:08.514299 env[1059]: 2023-10-02 19:25:08.440 [INFO][3528] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" iface="eth0" netns="/var/run/netns/cni-c789f3e3-ef8f-230a-da85-4b6a768d794e" Oct 2 19:25:08.514299 env[1059]: 2023-10-02 19:25:08.440 [INFO][3528] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" iface="eth0" netns="/var/run/netns/cni-c789f3e3-ef8f-230a-da85-4b6a768d794e" Oct 2 19:25:08.514299 env[1059]: 2023-10-02 19:25:08.441 [INFO][3528] k8s.go 583: Releasing IP address(es) ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Oct 2 19:25:08.514299 env[1059]: 2023-10-02 19:25:08.441 [INFO][3528] utils.go 196: Calico CNI releasing IP address ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Oct 2 19:25:08.514299 env[1059]: 2023-10-02 19:25:08.500 [INFO][3544] ipam_plugin.go 416: Releasing address using handleID ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" HandleID="k8s-pod-network.4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" Oct 2 19:25:08.514299 env[1059]: time="2023-10-02T19:25:08Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:08.514299 env[1059]: time="2023-10-02T19:25:08Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:08.514299 env[1059]: 2023-10-02 19:25:08.509 [WARNING][3544] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" HandleID="k8s-pod-network.4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" Oct 2 19:25:08.514299 env[1059]: 2023-10-02 19:25:08.509 [INFO][3544] ipam_plugin.go 444: Releasing address using workloadID ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" HandleID="k8s-pod-network.4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" Oct 2 19:25:08.514299 env[1059]: time="2023-10-02T19:25:08Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:08.514299 env[1059]: 2023-10-02 19:25:08.512 [INFO][3528] k8s.go 589: Teardown processing complete. ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Oct 2 19:25:08.516131 systemd[1]: run-netns-cni\x2dc789f3e3\x2def8f\x2d230a\x2dda85\x2d4b6a768d794e.mount: Deactivated successfully. Oct 2 19:25:08.517204 env[1059]: time="2023-10-02T19:25:08.516659569Z" level=info msg="TearDown network for sandbox \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\" successfully" Oct 2 19:25:08.517204 env[1059]: time="2023-10-02T19:25:08.516692268Z" level=info msg="StopPodSandbox for \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\" returns successfully" Oct 2 19:25:08.517796 env[1059]: time="2023-10-02T19:25:08.517757800Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-l946d,Uid:15addbe7-0532-4a24-88ac-35b8e1b61a7a,Namespace:kube-system,Attempt:1,}" Oct 2 19:25:08.779563 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:25:08.779692 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid14b081645e: link becomes ready Oct 2 19:25:08.780993 systemd-networkd[974]: calif6a8a00b309: Gained IPv6LL Oct 2 19:25:08.803034 systemd-networkd[974]: calid14b081645e: Link UP Oct 2 19:25:08.803040 systemd-networkd[974]: calid14b081645e: Gained carrier Oct 2 19:25:08.820173 env[1059]: 2023-10-02 19:25:08.641 [INFO][3560] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0 coredns-787d4945fb- kube-system 15addbe7-0532-4a24-88ac-35b8e1b61a7a 693 0 2023-10-02 19:24:26 +0000 UTC map[k8s-app:kube-dns pod-template-hash:787d4945fb projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510-3-0-4-c08ee46f57.novalocal coredns-787d4945fb-l946d eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calid14b081645e [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" Namespace="kube-system" Pod="coredns-787d4945fb-l946d" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-" Oct 2 19:25:08.820173 env[1059]: 2023-10-02 19:25:08.643 [INFO][3560] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" Namespace="kube-system" Pod="coredns-787d4945fb-l946d" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" Oct 2 19:25:08.820173 env[1059]: 2023-10-02 19:25:08.706 [INFO][3576] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" HandleID="k8s-pod-network.cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" Oct 2 19:25:08.820173 env[1059]: 2023-10-02 19:25:08.723 [INFO][3576] ipam_plugin.go 269: Auto assigning IP ContainerID="cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" HandleID="k8s-pod-network.cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00010a710), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510-3-0-4-c08ee46f57.novalocal", "pod":"coredns-787d4945fb-l946d", "timestamp":"2023-10-02 19:25:08.706744742 +0000 UTC"}, Hostname:"ci-3510-3-0-4-c08ee46f57.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:25:08.820173 env[1059]: time="2023-10-02T19:25:08Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:08.820173 env[1059]: time="2023-10-02T19:25:08Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:08.820173 env[1059]: 2023-10-02 19:25:08.724 [INFO][3576] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-4-c08ee46f57.novalocal' Oct 2 19:25:08.820173 env[1059]: 2023-10-02 19:25:08.725 [INFO][3576] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.820173 env[1059]: 2023-10-02 19:25:08.748 [INFO][3576] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.820173 env[1059]: 2023-10-02 19:25:08.755 [INFO][3576] ipam.go 489: Trying affinity for 192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.820173 env[1059]: 2023-10-02 19:25:08.757 [INFO][3576] ipam.go 155: Attempting to load block cidr=192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.820173 env[1059]: 2023-10-02 19:25:08.761 [INFO][3576] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.820173 env[1059]: 2023-10-02 19:25:08.761 [INFO][3576] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.122.64/26 handle="k8s-pod-network.cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.820173 env[1059]: 2023-10-02 19:25:08.763 [INFO][3576] ipam.go 1682: Creating new handle: k8s-pod-network.cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48 Oct 2 19:25:08.820173 env[1059]: 2023-10-02 19:25:08.767 [INFO][3576] ipam.go 1203: Writing block in order to claim IPs block=192.168.122.64/26 handle="k8s-pod-network.cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.820173 env[1059]: 2023-10-02 19:25:08.774 [INFO][3576] ipam.go 1216: Successfully claimed IPs: [192.168.122.66/26] block=192.168.122.64/26 handle="k8s-pod-network.cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.820173 env[1059]: 2023-10-02 19:25:08.774 [INFO][3576] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.122.66/26] handle="k8s-pod-network.cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.820173 env[1059]: time="2023-10-02T19:25:08Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:08.820173 env[1059]: 2023-10-02 19:25:08.774 [INFO][3576] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.122.66/26] IPv6=[] ContainerID="cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" HandleID="k8s-pod-network.cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" Oct 2 19:25:08.821058 env[1059]: 2023-10-02 19:25:08.775 [INFO][3560] k8s.go 383: Populated endpoint ContainerID="cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" Namespace="kube-system" Pod="coredns-787d4945fb-l946d" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"15addbe7-0532-4a24-88ac-35b8e1b61a7a", ResourceVersion:"693", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 24, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"", Pod:"coredns-787d4945fb-l946d", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.122.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid14b081645e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:08.821058 env[1059]: 2023-10-02 19:25:08.776 [INFO][3560] k8s.go 384: Calico CNI using IPs: [192.168.122.66/32] ContainerID="cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" Namespace="kube-system" Pod="coredns-787d4945fb-l946d" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" Oct 2 19:25:08.821058 env[1059]: 2023-10-02 19:25:08.776 [INFO][3560] dataplane_linux.go 68: Setting the host side veth name to calid14b081645e ContainerID="cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" Namespace="kube-system" Pod="coredns-787d4945fb-l946d" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" Oct 2 19:25:08.821058 env[1059]: 2023-10-02 19:25:08.790 [INFO][3560] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" Namespace="kube-system" Pod="coredns-787d4945fb-l946d" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" Oct 2 19:25:08.821058 env[1059]: 2023-10-02 19:25:08.801 [INFO][3560] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" Namespace="kube-system" Pod="coredns-787d4945fb-l946d" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"15addbe7-0532-4a24-88ac-35b8e1b61a7a", ResourceVersion:"693", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 24, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48", Pod:"coredns-787d4945fb-l946d", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.122.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid14b081645e", MAC:"72:e3:ad:49:45:18", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:08.821058 env[1059]: 2023-10-02 19:25:08.817 [INFO][3560] k8s.go 489: Wrote updated endpoint to datastore ContainerID="cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48" Namespace="kube-system" Pod="coredns-787d4945fb-l946d" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" Oct 2 19:25:08.845913 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali407badc7066: link becomes ready Oct 2 19:25:08.863118 env[1059]: time="2023-10-02T19:25:08.861941862Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:08.863118 env[1059]: time="2023-10-02T19:25:08.861992295Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:08.863118 env[1059]: time="2023-10-02T19:25:08.862013213Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:08.863794 systemd-networkd[974]: cali407badc7066: Link UP Oct 2 19:25:08.863799 systemd-networkd[974]: cali407badc7066: Gained carrier Oct 2 19:25:08.866767 env[1059]: time="2023-10-02T19:25:08.866221930Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48 pid=3611 runtime=io.containerd.runc.v2 Oct 2 19:25:08.879409 env[1059]: 2023-10-02 19:25:08.654 [INFO][3552] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0 coredns-787d4945fb- kube-system 7ecf6164-bedc-42af-8d48-225e2ed735d5 692 0 2023-10-02 19:24:26 +0000 UTC map[k8s-app:kube-dns pod-template-hash:787d4945fb projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510-3-0-4-c08ee46f57.novalocal coredns-787d4945fb-bs9gf eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali407badc7066 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" Namespace="kube-system" Pod="coredns-787d4945fb-bs9gf" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-" Oct 2 19:25:08.879409 env[1059]: 2023-10-02 19:25:08.654 [INFO][3552] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" Namespace="kube-system" Pod="coredns-787d4945fb-bs9gf" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" Oct 2 19:25:08.879409 env[1059]: 2023-10-02 19:25:08.731 [INFO][3582] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" HandleID="k8s-pod-network.ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" Oct 2 19:25:08.879409 env[1059]: 2023-10-02 19:25:08.754 [INFO][3582] ipam_plugin.go 269: Auto assigning IP ContainerID="ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" HandleID="k8s-pod-network.ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000525530), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510-3-0-4-c08ee46f57.novalocal", "pod":"coredns-787d4945fb-bs9gf", "timestamp":"2023-10-02 19:25:08.731020964 +0000 UTC"}, Hostname:"ci-3510-3-0-4-c08ee46f57.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:25:08.879409 env[1059]: time="2023-10-02T19:25:08Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:08.879409 env[1059]: time="2023-10-02T19:25:08Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:08.879409 env[1059]: 2023-10-02 19:25:08.774 [INFO][3582] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-4-c08ee46f57.novalocal' Oct 2 19:25:08.879409 env[1059]: 2023-10-02 19:25:08.779 [INFO][3582] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.879409 env[1059]: 2023-10-02 19:25:08.810 [INFO][3582] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.879409 env[1059]: 2023-10-02 19:25:08.821 [INFO][3582] ipam.go 489: Trying affinity for 192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.879409 env[1059]: 2023-10-02 19:25:08.824 [INFO][3582] ipam.go 155: Attempting to load block cidr=192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.879409 env[1059]: 2023-10-02 19:25:08.827 [INFO][3582] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.879409 env[1059]: 2023-10-02 19:25:08.827 [INFO][3582] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.122.64/26 handle="k8s-pod-network.ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.879409 env[1059]: 2023-10-02 19:25:08.829 [INFO][3582] ipam.go 1682: Creating new handle: k8s-pod-network.ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7 Oct 2 19:25:08.879409 env[1059]: 2023-10-02 19:25:08.834 [INFO][3582] ipam.go 1203: Writing block in order to claim IPs block=192.168.122.64/26 handle="k8s-pod-network.ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.879409 env[1059]: 2023-10-02 19:25:08.840 [INFO][3582] ipam.go 1216: Successfully claimed IPs: [192.168.122.67/26] block=192.168.122.64/26 handle="k8s-pod-network.ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.879409 env[1059]: 2023-10-02 19:25:08.840 [INFO][3582] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.122.67/26] handle="k8s-pod-network.ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:08.879409 env[1059]: time="2023-10-02T19:25:08Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:08.879409 env[1059]: 2023-10-02 19:25:08.840 [INFO][3582] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.122.67/26] IPv6=[] ContainerID="ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" HandleID="k8s-pod-network.ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" Oct 2 19:25:08.880103 env[1059]: 2023-10-02 19:25:08.842 [INFO][3552] k8s.go 383: Populated endpoint ContainerID="ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" Namespace="kube-system" Pod="coredns-787d4945fb-bs9gf" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"7ecf6164-bedc-42af-8d48-225e2ed735d5", ResourceVersion:"692", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 24, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"", Pod:"coredns-787d4945fb-bs9gf", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.122.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali407badc7066", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:08.880103 env[1059]: 2023-10-02 19:25:08.842 [INFO][3552] k8s.go 384: Calico CNI using IPs: [192.168.122.67/32] ContainerID="ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" Namespace="kube-system" Pod="coredns-787d4945fb-bs9gf" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" Oct 2 19:25:08.880103 env[1059]: 2023-10-02 19:25:08.842 [INFO][3552] dataplane_linux.go 68: Setting the host side veth name to cali407badc7066 ContainerID="ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" Namespace="kube-system" Pod="coredns-787d4945fb-bs9gf" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" Oct 2 19:25:08.880103 env[1059]: 2023-10-02 19:25:08.845 [INFO][3552] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" Namespace="kube-system" Pod="coredns-787d4945fb-bs9gf" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" Oct 2 19:25:08.880103 env[1059]: 2023-10-02 19:25:08.865 [INFO][3552] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" Namespace="kube-system" Pod="coredns-787d4945fb-bs9gf" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"7ecf6164-bedc-42af-8d48-225e2ed735d5", ResourceVersion:"692", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 24, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7", Pod:"coredns-787d4945fb-bs9gf", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.122.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali407badc7066", MAC:"b2:21:99:30:70:7c", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:08.880103 env[1059]: 2023-10-02 19:25:08.874 [INFO][3552] k8s.go 489: Wrote updated endpoint to datastore ContainerID="ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7" Namespace="kube-system" Pod="coredns-787d4945fb-bs9gf" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" Oct 2 19:25:08.890882 kernel: kauditd_printk_skb: 217 callbacks suppressed Oct 2 19:25:08.891034 kernel: audit: type=1325 audit(1696274708.884:1211): table=filter:118 family=2 entries=40 op=nft_register_chain pid=3624 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:25:08.884000 audit[3624]: NETFILTER_CFG table=filter:118 family=2 entries=40 op=nft_register_chain pid=3624 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:25:08.884000 audit[3624]: SYSCALL arch=c000003e syscall=46 success=yes exit=21096 a0=3 a1=7fffb8b9d6c0 a2=0 a3=7fffb8b9d6ac items=0 ppid=3198 pid=3624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.896810 kernel: audit: type=1300 audit(1696274708.884:1211): arch=c000003e syscall=46 success=yes exit=21096 a0=3 a1=7fffb8b9d6c0 a2=0 a3=7fffb8b9d6ac items=0 ppid=3198 pid=3624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.884000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:25:08.904921 kernel: audit: type=1327 audit(1696274708.884:1211): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:25:08.913272 systemd[1]: Started cri-containerd-cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48.scope. Oct 2 19:25:08.925220 env[1059]: time="2023-10-02T19:25:08.921143406Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:08.925220 env[1059]: time="2023-10-02T19:25:08.921232149Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:08.925220 env[1059]: time="2023-10-02T19:25:08.921271522Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:08.925220 env[1059]: time="2023-10-02T19:25:08.921636053Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7 pid=3649 runtime=io.containerd.runc.v2 Oct 2 19:25:08.930000 audit[3665]: NETFILTER_CFG table=filter:119 family=2 entries=34 op=nft_register_chain pid=3665 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:25:08.930000 audit[3665]: SYSCALL arch=c000003e syscall=46 success=yes exit=17900 a0=3 a1=7ffdf7815b80 a2=0 a3=7ffdf7815b6c items=0 ppid=3198 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.947277 kernel: audit: type=1325 audit(1696274708.930:1212): table=filter:119 family=2 entries=34 op=nft_register_chain pid=3665 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:25:08.947401 kernel: audit: type=1300 audit(1696274708.930:1212): arch=c000003e syscall=46 success=yes exit=17900 a0=3 a1=7ffdf7815b80 a2=0 a3=7ffdf7815b6c items=0 ppid=3198 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.947433 kernel: audit: type=1327 audit(1696274708.930:1212): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:25:08.930000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:25:08.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956817 kernel: audit: type=1400 audit(1696274708.948:1213): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956904 kernel: audit: type=1400 audit(1696274708.948:1214): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.966018 kernel: audit: type=1400 audit(1696274708.948:1215): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.966066 kernel: audit: type=1400 audit(1696274708.948:1216): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.952000 audit: BPF prog-id=153 op=LOAD Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { bpf } for pid=3623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3611 pid=3623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363343636346263663230313131623932353930333463396230383434 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { perfmon } for pid=3623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3611 pid=3623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363343636346263663230313131623932353930333463396230383434 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { bpf } for pid=3623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { bpf } for pid=3623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { bpf } for pid=3623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { perfmon } for pid=3623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { perfmon } for pid=3623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { perfmon } for pid=3623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { perfmon } for pid=3623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { perfmon } for pid=3623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { bpf } for pid=3623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { bpf } for pid=3623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit: BPF prog-id=154 op=LOAD Oct 2 19:25:08.956000 audit[3623]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c8160 items=0 ppid=3611 pid=3623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363343636346263663230313131623932353930333463396230383434 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { bpf } for pid=3623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { bpf } for pid=3623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { perfmon } for pid=3623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { perfmon } for pid=3623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { perfmon } for pid=3623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { perfmon } for pid=3623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { perfmon } for pid=3623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { bpf } for pid=3623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { bpf } for pid=3623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit: BPF prog-id=155 op=LOAD Oct 2 19:25:08.956000 audit[3623]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c81a8 items=0 ppid=3611 pid=3623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363343636346263663230313131623932353930333463396230383434 Oct 2 19:25:08.956000 audit: BPF prog-id=155 op=UNLOAD Oct 2 19:25:08.956000 audit: BPF prog-id=154 op=UNLOAD Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { bpf } for pid=3623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { bpf } for pid=3623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { bpf } for pid=3623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { perfmon } for pid=3623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { perfmon } for pid=3623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { perfmon } for pid=3623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { perfmon } for pid=3623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { perfmon } for pid=3623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { bpf } for pid=3623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit[3623]: AVC avc: denied { bpf } for pid=3623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:08.956000 audit: BPF prog-id=156 op=LOAD Oct 2 19:25:08.956000 audit[3623]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c85b8 items=0 ppid=3611 pid=3623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:08.956000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363343636346263663230313131623932353930333463396230383434 Oct 2 19:25:08.975290 systemd[1]: Started cri-containerd-ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7.scope. Oct 2 19:25:09.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.003000 audit: BPF prog-id=157 op=LOAD Oct 2 19:25:09.004000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.004000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3649 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.004000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365396431613031393536316532343062386264643064366261396432 Oct 2 19:25:09.004000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.004000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=3649 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.004000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365396431613031393536316532343062386264643064366261396432 Oct 2 19:25:09.004000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.004000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.004000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.004000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.004000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.004000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.004000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.004000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.004000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.004000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.004000 audit: BPF prog-id=158 op=LOAD Oct 2 19:25:09.004000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0003c84e0 items=0 ppid=3649 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.004000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365396431613031393536316532343062386264643064366261396432 Oct 2 19:25:09.005000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.005000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.005000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.005000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.005000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.005000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.005000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.005000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.005000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.005000 audit: BPF prog-id=159 op=LOAD Oct 2 19:25:09.005000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0003c8528 items=0 ppid=3649 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365396431613031393536316532343062386264643064366261396432 Oct 2 19:25:09.005000 audit: BPF prog-id=159 op=UNLOAD Oct 2 19:25:09.006000 audit: BPF prog-id=158 op=UNLOAD Oct 2 19:25:09.006000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.006000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.006000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.006000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.006000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.006000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.006000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.006000 audit[3662]: AVC avc: denied { perfmon } for pid=3662 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.006000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.006000 audit[3662]: AVC avc: denied { bpf } for pid=3662 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.006000 audit: BPF prog-id=160 op=LOAD Oct 2 19:25:09.006000 audit[3662]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0003c8938 items=0 ppid=3649 pid=3662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365396431613031393536316532343062386264643064366261396432 Oct 2 19:25:09.015833 env[1059]: time="2023-10-02T19:25:09.015778306Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-l946d,Uid:15addbe7-0532-4a24-88ac-35b8e1b61a7a,Namespace:kube-system,Attempt:1,} returns sandbox id \"cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48\"" Oct 2 19:25:09.019218 env[1059]: time="2023-10-02T19:25:09.019192611Z" level=info msg="CreateContainer within sandbox \"cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:25:09.048377 env[1059]: time="2023-10-02T19:25:09.048261831Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-787d4945fb-bs9gf,Uid:7ecf6164-bedc-42af-8d48-225e2ed735d5,Namespace:kube-system,Attempt:1,} returns sandbox id \"ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7\"" Oct 2 19:25:09.058214 env[1059]: time="2023-10-02T19:25:09.058178986Z" level=info msg="CreateContainer within sandbox \"ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Oct 2 19:25:09.066704 env[1059]: time="2023-10-02T19:25:09.066664492Z" level=info msg="CreateContainer within sandbox \"cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"52c083bd4df7add99195dcb5aca2a3c0cc021fc256607e702118ad84c5028d47\"" Oct 2 19:25:09.068776 env[1059]: time="2023-10-02T19:25:09.068753463Z" level=info msg="StartContainer for \"52c083bd4df7add99195dcb5aca2a3c0cc021fc256607e702118ad84c5028d47\"" Oct 2 19:25:09.084950 env[1059]: time="2023-10-02T19:25:09.084896217Z" level=info msg="CreateContainer within sandbox \"ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"2344c480123d9ccfd945015a0b0cca310372529c13f41868fd3c7855f6451788\"" Oct 2 19:25:09.087237 env[1059]: time="2023-10-02T19:25:09.087207029Z" level=info msg="StartContainer for \"2344c480123d9ccfd945015a0b0cca310372529c13f41868fd3c7855f6451788\"" Oct 2 19:25:09.098892 systemd[1]: Started cri-containerd-52c083bd4df7add99195dcb5aca2a3c0cc021fc256607e702118ad84c5028d47.scope. Oct 2 19:25:09.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.111000 audit: BPF prog-id=161 op=LOAD Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3611 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532633038336264346466376164643939313935646362356163613261 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3611 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532633038336264346466376164643939313935646362356163613261 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit: BPF prog-id=162 op=LOAD Oct 2 19:25:09.112000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000338360 items=0 ppid=3611 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532633038336264346466376164643939313935646362356163613261 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit: BPF prog-id=163 op=LOAD Oct 2 19:25:09.112000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003383a8 items=0 ppid=3611 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532633038336264346466376164643939313935646362356163613261 Oct 2 19:25:09.112000 audit: BPF prog-id=163 op=UNLOAD Oct 2 19:25:09.112000 audit: BPF prog-id=162 op=UNLOAD Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.112000 audit: BPF prog-id=164 op=LOAD Oct 2 19:25:09.112000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003387b8 items=0 ppid=3611 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532633038336264346466376164643939313935646362356163613261 Oct 2 19:25:09.124215 systemd[1]: Started cri-containerd-2344c480123d9ccfd945015a0b0cca310372529c13f41868fd3c7855f6451788.scope. Oct 2 19:25:09.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.142000 audit: BPF prog-id=165 op=LOAD Oct 2 19:25:09.143000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.143000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3649 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.143000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233343463343830313233643963636664393435303135613062306363 Oct 2 19:25:09.143000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.143000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3649 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.143000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233343463343830313233643963636664393435303135613062306363 Oct 2 19:25:09.143000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.143000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.143000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.143000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.143000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.143000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.143000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.143000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.143000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.143000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.143000 audit: BPF prog-id=166 op=LOAD Oct 2 19:25:09.143000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00031f640 items=0 ppid=3649 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.143000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233343463343830313233643963636664393435303135613062306363 Oct 2 19:25:09.144000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.144000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.144000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.144000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.144000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.144000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.144000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.144000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.144000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.144000 audit: BPF prog-id=167 op=LOAD Oct 2 19:25:09.144000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00031f688 items=0 ppid=3649 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233343463343830313233643963636664393435303135613062306363 Oct 2 19:25:09.144000 audit: BPF prog-id=167 op=UNLOAD Oct 2 19:25:09.144000 audit: BPF prog-id=166 op=UNLOAD Oct 2 19:25:09.145000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.145000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.145000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.145000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.145000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.145000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.145000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.145000 audit[3725]: AVC avc: denied { perfmon } for pid=3725 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.145000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.145000 audit[3725]: AVC avc: denied { bpf } for pid=3725 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.145000 audit: BPF prog-id=168 op=LOAD Oct 2 19:25:09.145000 audit[3725]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00031fa98 items=0 ppid=3649 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233343463343830313233643963636664393435303135613062306363 Oct 2 19:25:09.150938 env[1059]: time="2023-10-02T19:25:09.150901781Z" level=info msg="StartContainer for \"52c083bd4df7add99195dcb5aca2a3c0cc021fc256607e702118ad84c5028d47\" returns successfully" Oct 2 19:25:09.154691 env[1059]: time="2023-10-02T19:25:09.154661252Z" level=info msg="StopPodSandbox for \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\"" Oct 2 19:25:09.182589 env[1059]: time="2023-10-02T19:25:09.182520600Z" level=info msg="StartContainer for \"2344c480123d9ccfd945015a0b0cca310372529c13f41868fd3c7855f6451788\" returns successfully" Oct 2 19:25:09.269596 env[1059]: 2023-10-02 19:25:09.226 [INFO][3772] k8s.go 576: Cleaning up netns ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Oct 2 19:25:09.269596 env[1059]: 2023-10-02 19:25:09.226 [INFO][3772] dataplane_linux.go 524: Deleting workload's device in netns. ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" iface="eth0" netns="/var/run/netns/cni-07c374b1-e3bc-bdab-8bd8-0fd1496e452f" Oct 2 19:25:09.269596 env[1059]: 2023-10-02 19:25:09.226 [INFO][3772] dataplane_linux.go 535: Entered netns, deleting veth. ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" iface="eth0" netns="/var/run/netns/cni-07c374b1-e3bc-bdab-8bd8-0fd1496e452f" Oct 2 19:25:09.269596 env[1059]: 2023-10-02 19:25:09.227 [INFO][3772] dataplane_linux.go 562: Workload's veth was already gone. Nothing to do. ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" iface="eth0" netns="/var/run/netns/cni-07c374b1-e3bc-bdab-8bd8-0fd1496e452f" Oct 2 19:25:09.269596 env[1059]: 2023-10-02 19:25:09.227 [INFO][3772] k8s.go 583: Releasing IP address(es) ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Oct 2 19:25:09.269596 env[1059]: 2023-10-02 19:25:09.227 [INFO][3772] utils.go 196: Calico CNI releasing IP address ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Oct 2 19:25:09.269596 env[1059]: 2023-10-02 19:25:09.255 [INFO][3778] ipam_plugin.go 416: Releasing address using handleID ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" HandleID="k8s-pod-network.9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" Oct 2 19:25:09.269596 env[1059]: time="2023-10-02T19:25:09Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:09.269596 env[1059]: time="2023-10-02T19:25:09Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:09.269596 env[1059]: 2023-10-02 19:25:09.263 [WARNING][3778] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" HandleID="k8s-pod-network.9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" Oct 2 19:25:09.269596 env[1059]: 2023-10-02 19:25:09.263 [INFO][3778] ipam_plugin.go 444: Releasing address using workloadID ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" HandleID="k8s-pod-network.9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" Oct 2 19:25:09.269596 env[1059]: time="2023-10-02T19:25:09Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:09.269596 env[1059]: 2023-10-02 19:25:09.268 [INFO][3772] k8s.go 589: Teardown processing complete. ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Oct 2 19:25:09.270579 env[1059]: time="2023-10-02T19:25:09.270536937Z" level=info msg="TearDown network for sandbox \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\" successfully" Oct 2 19:25:09.270675 env[1059]: time="2023-10-02T19:25:09.270655074Z" level=info msg="StopPodSandbox for \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\" returns successfully" Oct 2 19:25:09.271360 env[1059]: time="2023-10-02T19:25:09.271335780Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69c848ddc6-9qp2f,Uid:8ba78cce-beab-4a7d-a696-087703409426,Namespace:calico-system,Attempt:1,}" Oct 2 19:25:09.450379 kubelet[1964]: I1002 19:25:09.450305 1964 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-787d4945fb-bs9gf" podStartSLOduration=43.45005167 pod.CreationTimestamp="2023-10-02 19:24:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:25:09.445352035 +0000 UTC m=+55.510049950" watchObservedRunningTime="2023-10-02 19:25:09.45005167 +0000 UTC m=+55.514749585" Oct 2 19:25:09.456000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:09.456000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c002a9f140 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:25:09.456000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:25:09.458000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525624 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:09.458000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c006a8c9f0 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:25:09.458000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:25:09.465000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525620 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:09.465000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c01229a900 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:25:09.465000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:25:09.477000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525626 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:09.477000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c00388f8c0 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:25:09.477000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:25:09.496400 systemd[1]: run-netns-cni\x2d07c374b1\x2de3bc\x2dbdab\x2d8bd8\x2d0fd1496e452f.mount: Deactivated successfully. Oct 2 19:25:09.508588 kubelet[1964]: I1002 19:25:09.508542 1964 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-787d4945fb-l946d" podStartSLOduration=43.508498206 pod.CreationTimestamp="2023-10-02 19:24:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:25:09.507310786 +0000 UTC m=+55.572008651" watchObservedRunningTime="2023-10-02 19:25:09.508498206 +0000 UTC m=+55.573196071" Oct 2 19:25:09.507000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:09.507000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c002a93100 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:25:09.507000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:25:09.507000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525624 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:09.507000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c00c59e390 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:25:09.507000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:25:09.614340 systemd-networkd[974]: cali06e40890872: Link UP Oct 2 19:25:09.614353 systemd-networkd[974]: cali06e40890872: Gained carrier Oct 2 19:25:09.632251 env[1059]: 2023-10-02 19:25:09.473 [INFO][3791] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0 calico-kube-controllers-69c848ddc6- calico-system 8ba78cce-beab-4a7d-a696-087703409426 714 0 2023-10-02 19:24:34 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:69c848ddc6 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510-3-0-4-c08ee46f57.novalocal calico-kube-controllers-69c848ddc6-9qp2f eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali06e40890872 [] []}} ContainerID="8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-9qp2f" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-" Oct 2 19:25:09.632251 env[1059]: 2023-10-02 19:25:09.473 [INFO][3791] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-9qp2f" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" Oct 2 19:25:09.632251 env[1059]: 2023-10-02 19:25:09.546 [INFO][3801] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" HandleID="k8s-pod-network.8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" Oct 2 19:25:09.632251 env[1059]: 2023-10-02 19:25:09.559 [INFO][3801] ipam_plugin.go 269: Auto assigning IP ContainerID="8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" HandleID="k8s-pod-network.8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000421fb0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510-3-0-4-c08ee46f57.novalocal", "pod":"calico-kube-controllers-69c848ddc6-9qp2f", "timestamp":"2023-10-02 19:25:09.546088947 +0000 UTC"}, Hostname:"ci-3510-3-0-4-c08ee46f57.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:25:09.632251 env[1059]: time="2023-10-02T19:25:09Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:09.632251 env[1059]: time="2023-10-02T19:25:09Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:09.632251 env[1059]: 2023-10-02 19:25:09.559 [INFO][3801] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-4-c08ee46f57.novalocal' Oct 2 19:25:09.632251 env[1059]: 2023-10-02 19:25:09.561 [INFO][3801] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:09.632251 env[1059]: 2023-10-02 19:25:09.566 [INFO][3801] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:09.632251 env[1059]: 2023-10-02 19:25:09.570 [INFO][3801] ipam.go 489: Trying affinity for 192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:09.632251 env[1059]: 2023-10-02 19:25:09.572 [INFO][3801] ipam.go 155: Attempting to load block cidr=192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:09.632251 env[1059]: 2023-10-02 19:25:09.575 [INFO][3801] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:09.632251 env[1059]: 2023-10-02 19:25:09.575 [INFO][3801] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.122.64/26 handle="k8s-pod-network.8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:09.632251 env[1059]: 2023-10-02 19:25:09.577 [INFO][3801] ipam.go 1682: Creating new handle: k8s-pod-network.8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48 Oct 2 19:25:09.632251 env[1059]: 2023-10-02 19:25:09.581 [INFO][3801] ipam.go 1203: Writing block in order to claim IPs block=192.168.122.64/26 handle="k8s-pod-network.8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:09.632251 env[1059]: 2023-10-02 19:25:09.596 [INFO][3801] ipam.go 1216: Successfully claimed IPs: [192.168.122.68/26] block=192.168.122.64/26 handle="k8s-pod-network.8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:09.632251 env[1059]: 2023-10-02 19:25:09.596 [INFO][3801] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.122.68/26] handle="k8s-pod-network.8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:09.632251 env[1059]: time="2023-10-02T19:25:09Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:09.632251 env[1059]: 2023-10-02 19:25:09.597 [INFO][3801] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.122.68/26] IPv6=[] ContainerID="8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" HandleID="k8s-pod-network.8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" Oct 2 19:25:09.633164 env[1059]: 2023-10-02 19:25:09.598 [INFO][3791] k8s.go 383: Populated endpoint ContainerID="8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-9qp2f" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"8ba78cce-beab-4a7d-a696-087703409426", ResourceVersion:"714", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"", Pod:"calico-kube-controllers-69c848ddc6-9qp2f", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.122.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali06e40890872", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:09.633164 env[1059]: 2023-10-02 19:25:09.598 [INFO][3791] k8s.go 384: Calico CNI using IPs: [192.168.122.68/32] ContainerID="8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-9qp2f" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" Oct 2 19:25:09.633164 env[1059]: 2023-10-02 19:25:09.598 [INFO][3791] dataplane_linux.go 68: Setting the host side veth name to cali06e40890872 ContainerID="8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-9qp2f" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" Oct 2 19:25:09.633164 env[1059]: 2023-10-02 19:25:09.599 [INFO][3791] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-9qp2f" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" Oct 2 19:25:09.633164 env[1059]: 2023-10-02 19:25:09.614 [INFO][3791] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-9qp2f" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"8ba78cce-beab-4a7d-a696-087703409426", ResourceVersion:"714", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48", Pod:"calico-kube-controllers-69c848ddc6-9qp2f", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.122.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali06e40890872", MAC:"fa:a8:86:d3:75:cd", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:09.633164 env[1059]: 2023-10-02 19:25:09.630 [INFO][3791] k8s.go 489: Wrote updated endpoint to datastore ContainerID="8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48" Namespace="calico-system" Pod="calico-kube-controllers-69c848ddc6-9qp2f" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" Oct 2 19:25:09.657993 env[1059]: time="2023-10-02T19:25:09.657880841Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:09.658199 env[1059]: time="2023-10-02T19:25:09.658174292Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:09.658291 env[1059]: time="2023-10-02T19:25:09.658268867Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:09.658641 env[1059]: time="2023-10-02T19:25:09.658612821Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48 pid=3851 runtime=io.containerd.runc.v2 Oct 2 19:25:09.690577 systemd[1]: run-containerd-runc-k8s.io-8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48-runc.SrIXfE.mount: Deactivated successfully. Oct 2 19:25:09.696220 systemd[1]: Started cri-containerd-8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48.scope. Oct 2 19:25:09.700000 audit[3875]: NETFILTER_CFG table=filter:120 family=2 entries=42 op=nft_register_chain pid=3875 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:25:09.700000 audit[3875]: SYSCALL arch=c000003e syscall=46 success=yes exit=20696 a0=3 a1=7ffc147a8370 a2=0 a3=7ffc147a835c items=0 ppid=3198 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.700000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:25:09.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.724000 audit: BPF prog-id=169 op=LOAD Oct 2 19:25:09.725000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.725000 audit[3863]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3851 pid=3863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862373735643133366236323162666234636239633362323032323530 Oct 2 19:25:09.725000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.725000 audit[3863]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3851 pid=3863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862373735643133366236323162666234636239633362323032323530 Oct 2 19:25:09.725000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.725000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.725000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.725000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.725000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.725000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.725000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.725000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.725000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.725000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.725000 audit: BPF prog-id=170 op=LOAD Oct 2 19:25:09.725000 audit[3863]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002211a0 items=0 ppid=3851 pid=3863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862373735643133366236323162666234636239633362323032323530 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit: BPF prog-id=171 op=LOAD Oct 2 19:25:09.726000 audit[3863]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002211e8 items=0 ppid=3851 pid=3863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862373735643133366236323162666234636239633362323032323530 Oct 2 19:25:09.726000 audit: BPF prog-id=171 op=UNLOAD Oct 2 19:25:09.726000 audit: BPF prog-id=170 op=UNLOAD Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { perfmon } for pid=3863 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit[3863]: AVC avc: denied { bpf } for pid=3863 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:09.726000 audit: BPF prog-id=172 op=LOAD Oct 2 19:25:09.726000 audit[3863]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0002215f8 items=0 ppid=3851 pid=3863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862373735643133366236323162666234636239633362323032323530 Oct 2 19:25:09.736000 audit[3885]: NETFILTER_CFG table=filter:121 family=2 entries=12 op=nft_register_rule pid=3885 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:09.736000 audit[3885]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffe2f08b3a0 a2=0 a3=7ffe2f08b38c items=0 ppid=2123 pid=3885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.736000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:09.739000 audit[3885]: NETFILTER_CFG table=nat:122 family=2 entries=30 op=nft_register_rule pid=3885 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:09.739000 audit[3885]: SYSCALL arch=c000003e syscall=46 success=yes exit=8836 a0=3 a1=7ffe2f08b3a0 a2=0 a3=7ffe2f08b38c items=0 ppid=2123 pid=3885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.739000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:09.779917 env[1059]: time="2023-10-02T19:25:09.779846785Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-69c848ddc6-9qp2f,Uid:8ba78cce-beab-4a7d-a696-087703409426,Namespace:calico-system,Attempt:1,} returns sandbox id \"8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48\"" Oct 2 19:25:09.786833 env[1059]: time="2023-10-02T19:25:09.785507272Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\"" Oct 2 19:25:09.809000 audit[3923]: NETFILTER_CFG table=filter:123 family=2 entries=12 op=nft_register_rule pid=3923 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:09.809000 audit[3923]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffccde72cc0 a2=0 a3=7ffccde72cac items=0 ppid=2123 pid=3923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.809000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:09.810000 audit[3923]: NETFILTER_CFG table=nat:124 family=2 entries=30 op=nft_register_rule pid=3923 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:09.810000 audit[3923]: SYSCALL arch=c000003e syscall=46 success=yes exit=8836 a0=3 a1=7ffccde72cc0 a2=0 a3=7ffccde72cac items=0 ppid=2123 pid=3923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:09.810000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:09.867073 systemd-networkd[974]: calid14b081645e: Gained IPv6LL Oct 2 19:25:10.891231 systemd-networkd[974]: cali407badc7066: Gained IPv6LL Oct 2 19:25:10.935000 audit[3956]: NETFILTER_CFG table=filter:125 family=2 entries=9 op=nft_register_rule pid=3956 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:10.935000 audit[3956]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffd37719b60 a2=0 a3=7ffd37719b4c items=0 ppid=2123 pid=3956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:10.935000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:10.952000 audit[3956]: NETFILTER_CFG table=nat:126 family=2 entries=63 op=nft_register_chain pid=3956 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:10.952000 audit[3956]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffd37719b60 a2=0 a3=7ffd37719b4c items=0 ppid=2123 pid=3956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:10.952000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:11.275195 systemd-networkd[974]: cali06e40890872: Gained IPv6LL Oct 2 19:25:11.371435 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2948068317.mount: Deactivated successfully. Oct 2 19:25:13.119000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:13.119000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000da8060 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:25:13.119000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:13.120000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:13.120000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000da80a0 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:25:13.120000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:13.123000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:13.123000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000da8200 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:25:13.123000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:13.124000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:25:13.124000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0011f8120 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:25:13.124000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:25:14.123661 env[1059]: time="2023-10-02T19:25:14.123589147Z" level=info msg="StopPodSandbox for \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\"" Oct 2 19:25:14.278247 env[1059]: 2023-10-02 19:25:14.224 [WARNING][3985] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"483f9644-0527-42b0-9e55-0a552dc084ac", ResourceVersion:"697", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5", Pod:"csi-node-driver-wnlh4", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.122.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calif6a8a00b309", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:14.278247 env[1059]: 2023-10-02 19:25:14.224 [INFO][3985] k8s.go 576: Cleaning up netns ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Oct 2 19:25:14.278247 env[1059]: 2023-10-02 19:25:14.224 [INFO][3985] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" iface="eth0" netns="" Oct 2 19:25:14.278247 env[1059]: 2023-10-02 19:25:14.225 [INFO][3985] k8s.go 583: Releasing IP address(es) ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Oct 2 19:25:14.278247 env[1059]: 2023-10-02 19:25:14.225 [INFO][3985] utils.go 196: Calico CNI releasing IP address ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Oct 2 19:25:14.278247 env[1059]: 2023-10-02 19:25:14.262 [INFO][3992] ipam_plugin.go 416: Releasing address using handleID ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" HandleID="k8s-pod-network.9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" Oct 2 19:25:14.278247 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:14.278247 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:14.278247 env[1059]: 2023-10-02 19:25:14.273 [WARNING][3992] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" HandleID="k8s-pod-network.9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" Oct 2 19:25:14.278247 env[1059]: 2023-10-02 19:25:14.273 [INFO][3992] ipam_plugin.go 444: Releasing address using workloadID ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" HandleID="k8s-pod-network.9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" Oct 2 19:25:14.278247 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:14.278247 env[1059]: 2023-10-02 19:25:14.276 [INFO][3985] k8s.go 589: Teardown processing complete. ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Oct 2 19:25:14.279176 env[1059]: time="2023-10-02T19:25:14.279126952Z" level=info msg="TearDown network for sandbox \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\" successfully" Oct 2 19:25:14.279262 env[1059]: time="2023-10-02T19:25:14.279243067Z" level=info msg="StopPodSandbox for \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\" returns successfully" Oct 2 19:25:14.279844 env[1059]: time="2023-10-02T19:25:14.279823336Z" level=info msg="RemovePodSandbox for \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\"" Oct 2 19:25:14.279986 env[1059]: time="2023-10-02T19:25:14.279948018Z" level=info msg="Forcibly stopping sandbox \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\"" Oct 2 19:25:14.394752 env[1059]: 2023-10-02 19:25:14.346 [WARNING][4012] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"483f9644-0527-42b0-9e55-0a552dc084ac", ResourceVersion:"697", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 24, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"5877dcb8f5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"4455f9370a4f7d3a0d2d8db7878de4f07c72f8ec49c95f23516792e6371b49d5", Pod:"csi-node-driver-wnlh4", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.122.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calif6a8a00b309", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:14.394752 env[1059]: 2023-10-02 19:25:14.346 [INFO][4012] k8s.go 576: Cleaning up netns ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Oct 2 19:25:14.394752 env[1059]: 2023-10-02 19:25:14.347 [INFO][4012] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" iface="eth0" netns="" Oct 2 19:25:14.394752 env[1059]: 2023-10-02 19:25:14.347 [INFO][4012] k8s.go 583: Releasing IP address(es) ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Oct 2 19:25:14.394752 env[1059]: 2023-10-02 19:25:14.347 [INFO][4012] utils.go 196: Calico CNI releasing IP address ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Oct 2 19:25:14.394752 env[1059]: 2023-10-02 19:25:14.377 [INFO][4018] ipam_plugin.go 416: Releasing address using handleID ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" HandleID="k8s-pod-network.9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" Oct 2 19:25:14.394752 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:14.394752 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:14.394752 env[1059]: 2023-10-02 19:25:14.385 [WARNING][4018] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" HandleID="k8s-pod-network.9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" Oct 2 19:25:14.394752 env[1059]: 2023-10-02 19:25:14.385 [INFO][4018] ipam_plugin.go 444: Releasing address using workloadID ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" HandleID="k8s-pod-network.9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-csi--node--driver--wnlh4-eth0" Oct 2 19:25:14.394752 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:14.394752 env[1059]: 2023-10-02 19:25:14.388 [INFO][4012] k8s.go 589: Teardown processing complete. ContainerID="9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745" Oct 2 19:25:14.395342 env[1059]: time="2023-10-02T19:25:14.395310750Z" level=info msg="TearDown network for sandbox \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\" successfully" Oct 2 19:25:14.398906 env[1059]: time="2023-10-02T19:25:14.398847894Z" level=info msg="RemovePodSandbox \"9003569fbfd73ee7ec3fa2c56f9704812e15247bc12f18babab6ce0e187db745\" returns successfully" Oct 2 19:25:14.399510 env[1059]: time="2023-10-02T19:25:14.399487683Z" level=info msg="StopPodSandbox for \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\"" Oct 2 19:25:14.524186 env[1059]: 2023-10-02 19:25:14.459 [WARNING][4037] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"15addbe7-0532-4a24-88ac-35b8e1b61a7a", ResourceVersion:"734", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 24, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48", Pod:"coredns-787d4945fb-l946d", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.122.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid14b081645e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:14.524186 env[1059]: 2023-10-02 19:25:14.459 [INFO][4037] k8s.go 576: Cleaning up netns ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Oct 2 19:25:14.524186 env[1059]: 2023-10-02 19:25:14.459 [INFO][4037] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" iface="eth0" netns="" Oct 2 19:25:14.524186 env[1059]: 2023-10-02 19:25:14.459 [INFO][4037] k8s.go 583: Releasing IP address(es) ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Oct 2 19:25:14.524186 env[1059]: 2023-10-02 19:25:14.460 [INFO][4037] utils.go 196: Calico CNI releasing IP address ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Oct 2 19:25:14.524186 env[1059]: 2023-10-02 19:25:14.510 [INFO][4043] ipam_plugin.go 416: Releasing address using handleID ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" HandleID="k8s-pod-network.4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" Oct 2 19:25:14.524186 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:14.524186 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:14.524186 env[1059]: 2023-10-02 19:25:14.519 [WARNING][4043] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" HandleID="k8s-pod-network.4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" Oct 2 19:25:14.524186 env[1059]: 2023-10-02 19:25:14.519 [INFO][4043] ipam_plugin.go 444: Releasing address using workloadID ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" HandleID="k8s-pod-network.4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" Oct 2 19:25:14.524186 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:14.524186 env[1059]: 2023-10-02 19:25:14.522 [INFO][4037] k8s.go 589: Teardown processing complete. ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Oct 2 19:25:14.526159 env[1059]: time="2023-10-02T19:25:14.524212257Z" level=info msg="TearDown network for sandbox \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\" successfully" Oct 2 19:25:14.526159 env[1059]: time="2023-10-02T19:25:14.524244236Z" level=info msg="StopPodSandbox for \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\" returns successfully" Oct 2 19:25:14.526159 env[1059]: time="2023-10-02T19:25:14.524608513Z" level=info msg="RemovePodSandbox for \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\"" Oct 2 19:25:14.526159 env[1059]: time="2023-10-02T19:25:14.524634150Z" level=info msg="Forcibly stopping sandbox \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\"" Oct 2 19:25:14.575812 env[1059]: time="2023-10-02T19:25:14.575769726Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:14.578145 env[1059]: time="2023-10-02T19:25:14.578119743Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e785d005ccc1ab22527a783835cf2741f6f5f385a8956144c661f8c23ae9d78,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:14.581055 env[1059]: time="2023-10-02T19:25:14.581020474Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.25.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:14.585540 env[1059]: time="2023-10-02T19:25:14.585508587Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:b764feb1777655aabce5988324b69b412d23e087436ee2414dff893a158fcdef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:25:14.585920 env[1059]: time="2023-10-02T19:25:14.585890126Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.25.0\" returns image reference \"sha256:5e785d005ccc1ab22527a783835cf2741f6f5f385a8956144c661f8c23ae9d78\"" Oct 2 19:25:14.597553 systemd[1]: run-containerd-runc-k8s.io-b5d80e716537a62e9600393e457ae0dac07cc9ebe425c5ae443cb179bc1ffe7a-runc.orxIQ0.mount: Deactivated successfully. Oct 2 19:25:14.601721 env[1059]: time="2023-10-02T19:25:14.601685114Z" level=info msg="CreateContainer within sandbox \"8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Oct 2 19:25:14.623777 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3667348433.mount: Deactivated successfully. Oct 2 19:25:14.635959 env[1059]: time="2023-10-02T19:25:14.635919394Z" level=info msg="CreateContainer within sandbox \"8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"a6144662bde73f18c4e1129621a7c04b7f69df17c0e2f7ff6637f98e99f7b927\"" Oct 2 19:25:14.636833 env[1059]: time="2023-10-02T19:25:14.636801123Z" level=info msg="StartContainer for \"a6144662bde73f18c4e1129621a7c04b7f69df17c0e2f7ff6637f98e99f7b927\"" Oct 2 19:25:14.657544 systemd[1]: Started cri-containerd-a6144662bde73f18c4e1129621a7c04b7f69df17c0e2f7ff6637f98e99f7b927.scope. Oct 2 19:25:14.708821 kernel: kauditd_printk_skb: 332 callbacks suppressed Oct 2 19:25:14.708947 kernel: audit: type=1400 audit(1696274714.700:1320): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708980 kernel: audit: type=1400 audit(1696274714.700:1321): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.715960 kernel: audit: type=1400 audit(1696274714.700:1322): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.716003 kernel: audit: type=1400 audit(1696274714.700:1323): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.719426 kernel: audit: type=1400 audit(1696274714.700:1324): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.723115 kernel: audit: type=1400 audit(1696274714.700:1325): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.726942 kernel: audit: type=1400 audit(1696274714.700:1326): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.730485 kernel: audit: type=1400 audit(1696274714.700:1327): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.735875 kernel: audit: type=1400 audit(1696274714.700:1328): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.739918 kernel: audit: type=1400 audit(1696274714.704:1329): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.704000 audit: BPF prog-id=173 op=LOAD Oct 2 19:25:14.705000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.705000 audit[4099]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3851 pid=4099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:14.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136313434363632626465373366313863346531313239363231613763 Oct 2 19:25:14.705000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.705000 audit[4099]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3851 pid=4099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:14.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136313434363632626465373366313863346531313239363231613763 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit: BPF prog-id=174 op=LOAD Oct 2 19:25:14.708000 audit[4099]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003bcb00 items=0 ppid=3851 pid=4099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:14.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136313434363632626465373366313863346531313239363231613763 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit: BPF prog-id=175 op=LOAD Oct 2 19:25:14.708000 audit[4099]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003bcb48 items=0 ppid=3851 pid=4099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:14.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136313434363632626465373366313863346531313239363231613763 Oct 2 19:25:14.708000 audit: BPF prog-id=175 op=UNLOAD Oct 2 19:25:14.708000 audit: BPF prog-id=174 op=UNLOAD Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:14.708000 audit: BPF prog-id=176 op=LOAD Oct 2 19:25:14.708000 audit[4099]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003bcf58 items=0 ppid=3851 pid=4099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:14.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136313434363632626465373366313863346531313239363231613763 Oct 2 19:25:14.742519 env[1059]: 2023-10-02 19:25:14.644 [WARNING][4064] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"15addbe7-0532-4a24-88ac-35b8e1b61a7a", ResourceVersion:"734", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 24, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"cc4664bcf20111b9259034c9b0844186d7f82b65c8f8ecbfef8174b2b9592d48", Pod:"coredns-787d4945fb-l946d", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.122.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid14b081645e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:14.742519 env[1059]: 2023-10-02 19:25:14.644 [INFO][4064] k8s.go 576: Cleaning up netns ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Oct 2 19:25:14.742519 env[1059]: 2023-10-02 19:25:14.644 [INFO][4064] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" iface="eth0" netns="" Oct 2 19:25:14.742519 env[1059]: 2023-10-02 19:25:14.644 [INFO][4064] k8s.go 583: Releasing IP address(es) ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Oct 2 19:25:14.742519 env[1059]: 2023-10-02 19:25:14.644 [INFO][4064] utils.go 196: Calico CNI releasing IP address ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Oct 2 19:25:14.742519 env[1059]: 2023-10-02 19:25:14.701 [INFO][4100] ipam_plugin.go 416: Releasing address using handleID ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" HandleID="k8s-pod-network.4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" Oct 2 19:25:14.742519 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:14.742519 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:14.742519 env[1059]: 2023-10-02 19:25:14.730 [WARNING][4100] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" HandleID="k8s-pod-network.4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" Oct 2 19:25:14.742519 env[1059]: 2023-10-02 19:25:14.730 [INFO][4100] ipam_plugin.go 444: Releasing address using workloadID ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" HandleID="k8s-pod-network.4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--l946d-eth0" Oct 2 19:25:14.742519 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:14.742519 env[1059]: 2023-10-02 19:25:14.739 [INFO][4064] k8s.go 589: Teardown processing complete. ContainerID="4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e" Oct 2 19:25:14.742519 env[1059]: time="2023-10-02T19:25:14.741497049Z" level=info msg="TearDown network for sandbox \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\" successfully" Oct 2 19:25:14.747253 env[1059]: time="2023-10-02T19:25:14.747210449Z" level=info msg="RemovePodSandbox \"4f42ea5f5cd3def20db335611094dccc16ca92aa55e839ab4751a25ab181d56e\" returns successfully" Oct 2 19:25:14.748226 env[1059]: time="2023-10-02T19:25:14.748204817Z" level=info msg="StopPodSandbox for \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\"" Oct 2 19:25:14.781890 env[1059]: time="2023-10-02T19:25:14.781830205Z" level=info msg="StartContainer for \"a6144662bde73f18c4e1129621a7c04b7f69df17c0e2f7ff6637f98e99f7b927\" returns successfully" Oct 2 19:25:14.882823 env[1059]: 2023-10-02 19:25:14.829 [WARNING][4150] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"8ba78cce-beab-4a7d-a696-087703409426", ResourceVersion:"726", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48", Pod:"calico-kube-controllers-69c848ddc6-9qp2f", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.122.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali06e40890872", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:14.882823 env[1059]: 2023-10-02 19:25:14.830 [INFO][4150] k8s.go 576: Cleaning up netns ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Oct 2 19:25:14.882823 env[1059]: 2023-10-02 19:25:14.830 [INFO][4150] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" iface="eth0" netns="" Oct 2 19:25:14.882823 env[1059]: 2023-10-02 19:25:14.830 [INFO][4150] k8s.go 583: Releasing IP address(es) ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Oct 2 19:25:14.882823 env[1059]: 2023-10-02 19:25:14.830 [INFO][4150] utils.go 196: Calico CNI releasing IP address ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Oct 2 19:25:14.882823 env[1059]: 2023-10-02 19:25:14.863 [INFO][4156] ipam_plugin.go 416: Releasing address using handleID ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" HandleID="k8s-pod-network.9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" Oct 2 19:25:14.882823 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:14.882823 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:14.882823 env[1059]: 2023-10-02 19:25:14.872 [WARNING][4156] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" HandleID="k8s-pod-network.9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" Oct 2 19:25:14.882823 env[1059]: 2023-10-02 19:25:14.873 [INFO][4156] ipam_plugin.go 444: Releasing address using workloadID ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" HandleID="k8s-pod-network.9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" Oct 2 19:25:14.882823 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:14.882823 env[1059]: 2023-10-02 19:25:14.877 [INFO][4150] k8s.go 589: Teardown processing complete. ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Oct 2 19:25:14.883885 env[1059]: time="2023-10-02T19:25:14.883819451Z" level=info msg="TearDown network for sandbox \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\" successfully" Oct 2 19:25:14.883963 env[1059]: time="2023-10-02T19:25:14.883882940Z" level=info msg="StopPodSandbox for \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\" returns successfully" Oct 2 19:25:14.884457 env[1059]: time="2023-10-02T19:25:14.884279787Z" level=info msg="RemovePodSandbox for \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\"" Oct 2 19:25:14.884457 env[1059]: time="2023-10-02T19:25:14.884308249Z" level=info msg="Forcibly stopping sandbox \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\"" Oct 2 19:25:15.000330 env[1059]: 2023-10-02 19:25:14.957 [WARNING][4175] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0", GenerateName:"calico-kube-controllers-69c848ddc6-", Namespace:"calico-system", SelfLink:"", UID:"8ba78cce-beab-4a7d-a696-087703409426", ResourceVersion:"726", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 24, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"69c848ddc6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"8b775d136b621bfb4cb9c3b202250ce9946a60c673806709eab885c67e767b48", Pod:"calico-kube-controllers-69c848ddc6-9qp2f", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.122.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali06e40890872", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:15.000330 env[1059]: 2023-10-02 19:25:14.958 [INFO][4175] k8s.go 576: Cleaning up netns ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Oct 2 19:25:15.000330 env[1059]: 2023-10-02 19:25:14.958 [INFO][4175] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" iface="eth0" netns="" Oct 2 19:25:15.000330 env[1059]: 2023-10-02 19:25:14.958 [INFO][4175] k8s.go 583: Releasing IP address(es) ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Oct 2 19:25:15.000330 env[1059]: 2023-10-02 19:25:14.958 [INFO][4175] utils.go 196: Calico CNI releasing IP address ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Oct 2 19:25:15.000330 env[1059]: 2023-10-02 19:25:14.984 [INFO][4181] ipam_plugin.go 416: Releasing address using handleID ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" HandleID="k8s-pod-network.9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" Oct 2 19:25:15.000330 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:15.000330 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:15.000330 env[1059]: 2023-10-02 19:25:14.992 [WARNING][4181] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" HandleID="k8s-pod-network.9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" Oct 2 19:25:15.000330 env[1059]: 2023-10-02 19:25:14.992 [INFO][4181] ipam_plugin.go 444: Releasing address using workloadID ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" HandleID="k8s-pod-network.9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--kube--controllers--69c848ddc6--9qp2f-eth0" Oct 2 19:25:15.000330 env[1059]: time="2023-10-02T19:25:14Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:15.000330 env[1059]: 2023-10-02 19:25:14.996 [INFO][4175] k8s.go 589: Teardown processing complete. ContainerID="9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712" Oct 2 19:25:15.000882 env[1059]: time="2023-10-02T19:25:15.000830217Z" level=info msg="TearDown network for sandbox \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\" successfully" Oct 2 19:25:15.007317 env[1059]: time="2023-10-02T19:25:15.007278098Z" level=info msg="RemovePodSandbox \"9f14df18402308cdb4d5b5465cac568baaeafd9ff6322e0141f577cf8c15c712\" returns successfully" Oct 2 19:25:15.008129 env[1059]: time="2023-10-02T19:25:15.008088046Z" level=info msg="StopPodSandbox for \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\"" Oct 2 19:25:15.134318 env[1059]: 2023-10-02 19:25:15.082 [WARNING][4200] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"7ecf6164-bedc-42af-8d48-225e2ed735d5", ResourceVersion:"731", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 24, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7", Pod:"coredns-787d4945fb-bs9gf", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.122.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali407badc7066", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:15.134318 env[1059]: 2023-10-02 19:25:15.082 [INFO][4200] k8s.go 576: Cleaning up netns ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Oct 2 19:25:15.134318 env[1059]: 2023-10-02 19:25:15.082 [INFO][4200] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" iface="eth0" netns="" Oct 2 19:25:15.134318 env[1059]: 2023-10-02 19:25:15.082 [INFO][4200] k8s.go 583: Releasing IP address(es) ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Oct 2 19:25:15.134318 env[1059]: 2023-10-02 19:25:15.082 [INFO][4200] utils.go 196: Calico CNI releasing IP address ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Oct 2 19:25:15.134318 env[1059]: 2023-10-02 19:25:15.114 [INFO][4206] ipam_plugin.go 416: Releasing address using handleID ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" HandleID="k8s-pod-network.14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" Oct 2 19:25:15.134318 env[1059]: time="2023-10-02T19:25:15Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:15.134318 env[1059]: time="2023-10-02T19:25:15Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:15.134318 env[1059]: 2023-10-02 19:25:15.127 [WARNING][4206] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" HandleID="k8s-pod-network.14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" Oct 2 19:25:15.134318 env[1059]: 2023-10-02 19:25:15.128 [INFO][4206] ipam_plugin.go 444: Releasing address using workloadID ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" HandleID="k8s-pod-network.14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" Oct 2 19:25:15.134318 env[1059]: time="2023-10-02T19:25:15Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:15.134318 env[1059]: 2023-10-02 19:25:15.133 [INFO][4200] k8s.go 589: Teardown processing complete. ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Oct 2 19:25:15.135060 env[1059]: time="2023-10-02T19:25:15.135022689Z" level=info msg="TearDown network for sandbox \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\" successfully" Oct 2 19:25:15.136027 env[1059]: time="2023-10-02T19:25:15.135057986Z" level=info msg="StopPodSandbox for \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\" returns successfully" Oct 2 19:25:15.136027 env[1059]: time="2023-10-02T19:25:15.135493826Z" level=info msg="RemovePodSandbox for \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\"" Oct 2 19:25:15.136027 env[1059]: time="2023-10-02T19:25:15.135530084Z" level=info msg="Forcibly stopping sandbox \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\"" Oct 2 19:25:15.208950 env[1059]: 2023-10-02 19:25:15.173 [WARNING][4227] k8s.go 540: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0", GenerateName:"coredns-787d4945fb-", Namespace:"kube-system", SelfLink:"", UID:"7ecf6164-bedc-42af-8d48-225e2ed735d5", ResourceVersion:"731", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 24, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"787d4945fb", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"ce9d1a019561e240b8bdd0d6ba9d2260e976ad733e4c5623e88475ad7b15d4d7", Pod:"coredns-787d4945fb-bs9gf", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.122.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali407badc7066", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:15.208950 env[1059]: 2023-10-02 19:25:15.173 [INFO][4227] k8s.go 576: Cleaning up netns ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Oct 2 19:25:15.208950 env[1059]: 2023-10-02 19:25:15.173 [INFO][4227] dataplane_linux.go 520: CleanUpNamespace called with no netns name, ignoring. ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" iface="eth0" netns="" Oct 2 19:25:15.208950 env[1059]: 2023-10-02 19:25:15.173 [INFO][4227] k8s.go 583: Releasing IP address(es) ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Oct 2 19:25:15.208950 env[1059]: 2023-10-02 19:25:15.173 [INFO][4227] utils.go 196: Calico CNI releasing IP address ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Oct 2 19:25:15.208950 env[1059]: 2023-10-02 19:25:15.196 [INFO][4233] ipam_plugin.go 416: Releasing address using handleID ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" HandleID="k8s-pod-network.14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" Oct 2 19:25:15.208950 env[1059]: time="2023-10-02T19:25:15Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:15.208950 env[1059]: time="2023-10-02T19:25:15Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:15.208950 env[1059]: 2023-10-02 19:25:15.204 [WARNING][4233] ipam_plugin.go 433: Asked to release address but it doesn't exist. Ignoring ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" HandleID="k8s-pod-network.14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" Oct 2 19:25:15.208950 env[1059]: 2023-10-02 19:25:15.204 [INFO][4233] ipam_plugin.go 444: Releasing address using workloadID ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" HandleID="k8s-pod-network.14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-coredns--787d4945fb--bs9gf-eth0" Oct 2 19:25:15.208950 env[1059]: time="2023-10-02T19:25:15Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:15.208950 env[1059]: 2023-10-02 19:25:15.207 [INFO][4227] k8s.go 589: Teardown processing complete. ContainerID="14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0" Oct 2 19:25:15.210491 env[1059]: time="2023-10-02T19:25:15.209450317Z" level=info msg="TearDown network for sandbox \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\" successfully" Oct 2 19:25:15.213428 env[1059]: time="2023-10-02T19:25:15.213404317Z" level=info msg="RemovePodSandbox \"14f13371267c120a52c99af88226148854580f293f1c94536c7fe407ae5082f0\" returns successfully" Oct 2 19:25:15.585826 kubelet[1964]: I1002 19:25:15.585579 1964 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-69c848ddc6-9qp2f" podStartSLOduration=-9.223371995269245e+09 pod.CreationTimestamp="2023-10-02 19:24:34 +0000 UTC" firstStartedPulling="2023-10-02 19:25:09.781520452 +0000 UTC m=+55.846218317" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:25:15.515643839 +0000 UTC m=+61.580341754" watchObservedRunningTime="2023-10-02 19:25:15.585531036 +0000 UTC m=+61.650228901" Oct 2 19:25:18.678108 kubelet[1964]: I1002 19:25:18.678077 1964 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:25:18.678647 kubelet[1964]: I1002 19:25:18.678631 1964 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:25:18.684845 systemd[1]: Created slice kubepods-besteffort-pod3110c6fa_c38b_474a_8c36_3d8ab1342f53.slice. Oct 2 19:25:18.690938 systemd[1]: Created slice kubepods-besteffort-pod1769c51c_53d7_4d61_b4e7_cb4a88b27c95.slice. Oct 2 19:25:18.765000 audit[4290]: NETFILTER_CFG table=filter:127 family=2 entries=7 op=nft_register_rule pid=4290 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:18.765000 audit[4290]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffd281b0670 a2=0 a3=7ffd281b065c items=0 ppid=2123 pid=4290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:18.765000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:18.767000 audit[4290]: NETFILTER_CFG table=nat:128 family=2 entries=78 op=nft_register_rule pid=4290 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:18.767000 audit[4290]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffd281b0670 a2=0 a3=7ffd281b065c items=0 ppid=2123 pid=4290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:18.767000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:18.799691 kubelet[1964]: I1002 19:25:18.799666 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fnds7\" (UniqueName: \"kubernetes.io/projected/1769c51c-53d7-4d61-b4e7-cb4a88b27c95-kube-api-access-fnds7\") pod \"calico-apiserver-98d77d889-wn285\" (UID: \"1769c51c-53d7-4d61-b4e7-cb4a88b27c95\") " pod="calico-apiserver/calico-apiserver-98d77d889-wn285" Oct 2 19:25:18.800947 kubelet[1964]: I1002 19:25:18.800933 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hr8bd\" (UniqueName: \"kubernetes.io/projected/3110c6fa-c38b-474a-8c36-3d8ab1342f53-kube-api-access-hr8bd\") pod \"calico-apiserver-98d77d889-wk8jm\" (UID: \"3110c6fa-c38b-474a-8c36-3d8ab1342f53\") " pod="calico-apiserver/calico-apiserver-98d77d889-wk8jm" Oct 2 19:25:18.801056 kubelet[1964]: I1002 19:25:18.801045 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/3110c6fa-c38b-474a-8c36-3d8ab1342f53-calico-apiserver-certs\") pod \"calico-apiserver-98d77d889-wk8jm\" (UID: \"3110c6fa-c38b-474a-8c36-3d8ab1342f53\") " pod="calico-apiserver/calico-apiserver-98d77d889-wk8jm" Oct 2 19:25:18.801153 kubelet[1964]: I1002 19:25:18.801143 1964 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1769c51c-53d7-4d61-b4e7-cb4a88b27c95-calico-apiserver-certs\") pod \"calico-apiserver-98d77d889-wn285\" (UID: \"1769c51c-53d7-4d61-b4e7-cb4a88b27c95\") " pod="calico-apiserver/calico-apiserver-98d77d889-wn285" Oct 2 19:25:18.818000 audit[4316]: NETFILTER_CFG table=filter:129 family=2 entries=8 op=nft_register_rule pid=4316 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:18.818000 audit[4316]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7fff8b9c4860 a2=0 a3=7fff8b9c484c items=0 ppid=2123 pid=4316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:18.818000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:18.821000 audit[4316]: NETFILTER_CFG table=nat:130 family=2 entries=78 op=nft_register_rule pid=4316 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:18.821000 audit[4316]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7fff8b9c4860 a2=0 a3=7fff8b9c484c items=0 ppid=2123 pid=4316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:18.821000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:18.989777 env[1059]: time="2023-10-02T19:25:18.989638712Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-98d77d889-wk8jm,Uid:3110c6fa-c38b-474a-8c36-3d8ab1342f53,Namespace:calico-apiserver,Attempt:0,}" Oct 2 19:25:18.993965 env[1059]: time="2023-10-02T19:25:18.993909164Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-98d77d889-wn285,Uid:1769c51c-53d7-4d61-b4e7-cb4a88b27c95,Namespace:calico-apiserver,Attempt:0,}" Oct 2 19:25:19.172299 systemd-networkd[974]: cali3b2ca9a7d3e: Link UP Oct 2 19:25:19.176388 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3b2ca9a7d3e: link becomes ready Oct 2 19:25:19.175771 systemd-networkd[974]: cali3b2ca9a7d3e: Gained carrier Oct 2 19:25:19.185783 env[1059]: 2023-10-02 19:25:19.067 [INFO][4321] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wk8jm-eth0 calico-apiserver-98d77d889- calico-apiserver 3110c6fa-c38b-474a-8c36-3d8ab1342f53 816 0 2023-10-02 19:25:18 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:98d77d889 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510-3-0-4-c08ee46f57.novalocal calico-apiserver-98d77d889-wk8jm eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali3b2ca9a7d3e [] []}} ContainerID="d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" Namespace="calico-apiserver" Pod="calico-apiserver-98d77d889-wk8jm" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wk8jm-" Oct 2 19:25:19.185783 env[1059]: 2023-10-02 19:25:19.067 [INFO][4321] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" Namespace="calico-apiserver" Pod="calico-apiserver-98d77d889-wk8jm" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wk8jm-eth0" Oct 2 19:25:19.185783 env[1059]: 2023-10-02 19:25:19.119 [INFO][4343] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" HandleID="k8s-pod-network.d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wk8jm-eth0" Oct 2 19:25:19.185783 env[1059]: 2023-10-02 19:25:19.132 [INFO][4343] ipam_plugin.go 269: Auto assigning IP ContainerID="d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" HandleID="k8s-pod-network.d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wk8jm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004d560), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510-3-0-4-c08ee46f57.novalocal", "pod":"calico-apiserver-98d77d889-wk8jm", "timestamp":"2023-10-02 19:25:19.119283267 +0000 UTC"}, Hostname:"ci-3510-3-0-4-c08ee46f57.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:25:19.185783 env[1059]: time="2023-10-02T19:25:19Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:19.185783 env[1059]: time="2023-10-02T19:25:19Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:19.185783 env[1059]: 2023-10-02 19:25:19.132 [INFO][4343] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-4-c08ee46f57.novalocal' Oct 2 19:25:19.185783 env[1059]: 2023-10-02 19:25:19.134 [INFO][4343] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.185783 env[1059]: 2023-10-02 19:25:19.139 [INFO][4343] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.185783 env[1059]: 2023-10-02 19:25:19.143 [INFO][4343] ipam.go 489: Trying affinity for 192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.185783 env[1059]: 2023-10-02 19:25:19.145 [INFO][4343] ipam.go 155: Attempting to load block cidr=192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.185783 env[1059]: 2023-10-02 19:25:19.148 [INFO][4343] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.185783 env[1059]: 2023-10-02 19:25:19.148 [INFO][4343] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.122.64/26 handle="k8s-pod-network.d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.185783 env[1059]: 2023-10-02 19:25:19.150 [INFO][4343] ipam.go 1682: Creating new handle: k8s-pod-network.d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e Oct 2 19:25:19.185783 env[1059]: 2023-10-02 19:25:19.154 [INFO][4343] ipam.go 1203: Writing block in order to claim IPs block=192.168.122.64/26 handle="k8s-pod-network.d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.185783 env[1059]: 2023-10-02 19:25:19.160 [INFO][4343] ipam.go 1216: Successfully claimed IPs: [192.168.122.69/26] block=192.168.122.64/26 handle="k8s-pod-network.d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.185783 env[1059]: 2023-10-02 19:25:19.160 [INFO][4343] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.122.69/26] handle="k8s-pod-network.d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.185783 env[1059]: time="2023-10-02T19:25:19Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:19.185783 env[1059]: 2023-10-02 19:25:19.160 [INFO][4343] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.122.69/26] IPv6=[] ContainerID="d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" HandleID="k8s-pod-network.d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wk8jm-eth0" Oct 2 19:25:19.186590 env[1059]: 2023-10-02 19:25:19.162 [INFO][4321] k8s.go 383: Populated endpoint ContainerID="d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" Namespace="calico-apiserver" Pod="calico-apiserver-98d77d889-wk8jm" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wk8jm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wk8jm-eth0", GenerateName:"calico-apiserver-98d77d889-", Namespace:"calico-apiserver", SelfLink:"", UID:"3110c6fa-c38b-474a-8c36-3d8ab1342f53", ResourceVersion:"816", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 25, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"98d77d889", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"", Pod:"calico-apiserver-98d77d889-wk8jm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.122.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3b2ca9a7d3e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:19.186590 env[1059]: 2023-10-02 19:25:19.162 [INFO][4321] k8s.go 384: Calico CNI using IPs: [192.168.122.69/32] ContainerID="d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" Namespace="calico-apiserver" Pod="calico-apiserver-98d77d889-wk8jm" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wk8jm-eth0" Oct 2 19:25:19.186590 env[1059]: 2023-10-02 19:25:19.162 [INFO][4321] dataplane_linux.go 68: Setting the host side veth name to cali3b2ca9a7d3e ContainerID="d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" Namespace="calico-apiserver" Pod="calico-apiserver-98d77d889-wk8jm" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wk8jm-eth0" Oct 2 19:25:19.186590 env[1059]: 2023-10-02 19:25:19.163 [INFO][4321] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" Namespace="calico-apiserver" Pod="calico-apiserver-98d77d889-wk8jm" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wk8jm-eth0" Oct 2 19:25:19.186590 env[1059]: 2023-10-02 19:25:19.177 [INFO][4321] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" Namespace="calico-apiserver" Pod="calico-apiserver-98d77d889-wk8jm" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wk8jm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wk8jm-eth0", GenerateName:"calico-apiserver-98d77d889-", Namespace:"calico-apiserver", SelfLink:"", UID:"3110c6fa-c38b-474a-8c36-3d8ab1342f53", ResourceVersion:"816", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 25, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"98d77d889", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e", Pod:"calico-apiserver-98d77d889-wk8jm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.122.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3b2ca9a7d3e", MAC:"9e:b2:6c:1b:3e:72", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:19.186590 env[1059]: 2023-10-02 19:25:19.183 [INFO][4321] k8s.go 489: Wrote updated endpoint to datastore ContainerID="d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e" Namespace="calico-apiserver" Pod="calico-apiserver-98d77d889-wk8jm" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wk8jm-eth0" Oct 2 19:25:19.240608 env[1059]: time="2023-10-02T19:25:19.240458097Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:19.240608 env[1059]: time="2023-10-02T19:25:19.240577149Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:19.240762 env[1059]: time="2023-10-02T19:25:19.240610141Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:19.241697 env[1059]: time="2023-10-02T19:25:19.240911415Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e pid=4377 runtime=io.containerd.runc.v2 Oct 2 19:25:19.247444 systemd-networkd[974]: cali183c288ea0d: Link UP Oct 2 19:25:19.247452 systemd-networkd[974]: cali183c288ea0d: Gained carrier Oct 2 19:25:19.260697 env[1059]: 2023-10-02 19:25:19.104 [INFO][4331] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wn285-eth0 calico-apiserver-98d77d889- calico-apiserver 1769c51c-53d7-4d61-b4e7-cb4a88b27c95 818 0 2023-10-02 19:25:18 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:98d77d889 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510-3-0-4-c08ee46f57.novalocal calico-apiserver-98d77d889-wn285 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali183c288ea0d [] []}} ContainerID="0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" Namespace="calico-apiserver" Pod="calico-apiserver-98d77d889-wn285" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wn285-" Oct 2 19:25:19.260697 env[1059]: 2023-10-02 19:25:19.104 [INFO][4331] k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" Namespace="calico-apiserver" Pod="calico-apiserver-98d77d889-wn285" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wn285-eth0" Oct 2 19:25:19.260697 env[1059]: 2023-10-02 19:25:19.151 [INFO][4349] ipam_plugin.go 229: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" HandleID="k8s-pod-network.0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wn285-eth0" Oct 2 19:25:19.260697 env[1059]: 2023-10-02 19:25:19.168 [INFO][4349] ipam_plugin.go 269: Auto assigning IP ContainerID="0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" HandleID="k8s-pod-network.0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wn285-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00010a3e0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510-3-0-4-c08ee46f57.novalocal", "pod":"calico-apiserver-98d77d889-wn285", "timestamp":"2023-10-02 19:25:19.151662279 +0000 UTC"}, Hostname:"ci-3510-3-0-4-c08ee46f57.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Oct 2 19:25:19.260697 env[1059]: time="2023-10-02T19:25:19Z" level=info msg="About to acquire host-wide IPAM lock." source="ipam_plugin.go:357" Oct 2 19:25:19.260697 env[1059]: time="2023-10-02T19:25:19Z" level=info msg="Acquired host-wide IPAM lock." source="ipam_plugin.go:372" Oct 2 19:25:19.260697 env[1059]: 2023-10-02 19:25:19.169 [INFO][4349] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-0-4-c08ee46f57.novalocal' Oct 2 19:25:19.260697 env[1059]: 2023-10-02 19:25:19.172 [INFO][4349] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.260697 env[1059]: 2023-10-02 19:25:19.189 [INFO][4349] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.260697 env[1059]: 2023-10-02 19:25:19.201 [INFO][4349] ipam.go 489: Trying affinity for 192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.260697 env[1059]: 2023-10-02 19:25:19.205 [INFO][4349] ipam.go 155: Attempting to load block cidr=192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.260697 env[1059]: 2023-10-02 19:25:19.209 [INFO][4349] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.122.64/26 host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.260697 env[1059]: 2023-10-02 19:25:19.209 [INFO][4349] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.122.64/26 handle="k8s-pod-network.0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.260697 env[1059]: 2023-10-02 19:25:19.213 [INFO][4349] ipam.go 1682: Creating new handle: k8s-pod-network.0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc Oct 2 19:25:19.260697 env[1059]: 2023-10-02 19:25:19.218 [INFO][4349] ipam.go 1203: Writing block in order to claim IPs block=192.168.122.64/26 handle="k8s-pod-network.0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.260697 env[1059]: 2023-10-02 19:25:19.234 [INFO][4349] ipam.go 1216: Successfully claimed IPs: [192.168.122.70/26] block=192.168.122.64/26 handle="k8s-pod-network.0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.260697 env[1059]: 2023-10-02 19:25:19.234 [INFO][4349] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.122.70/26] handle="k8s-pod-network.0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" host="ci-3510-3-0-4-c08ee46f57.novalocal" Oct 2 19:25:19.260697 env[1059]: time="2023-10-02T19:25:19Z" level=info msg="Released host-wide IPAM lock." source="ipam_plugin.go:378" Oct 2 19:25:19.260697 env[1059]: 2023-10-02 19:25:19.234 [INFO][4349] ipam_plugin.go 287: Calico CNI IPAM assigned addresses IPv4=[192.168.122.70/26] IPv6=[] ContainerID="0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" HandleID="k8s-pod-network.0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" Workload="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wn285-eth0" Oct 2 19:25:19.262909 env[1059]: 2023-10-02 19:25:19.235 [INFO][4331] k8s.go 383: Populated endpoint ContainerID="0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" Namespace="calico-apiserver" Pod="calico-apiserver-98d77d889-wn285" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wn285-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wn285-eth0", GenerateName:"calico-apiserver-98d77d889-", Namespace:"calico-apiserver", SelfLink:"", UID:"1769c51c-53d7-4d61-b4e7-cb4a88b27c95", ResourceVersion:"818", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 25, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"98d77d889", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"", Pod:"calico-apiserver-98d77d889-wn285", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.122.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali183c288ea0d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:19.262909 env[1059]: 2023-10-02 19:25:19.235 [INFO][4331] k8s.go 384: Calico CNI using IPs: [192.168.122.70/32] ContainerID="0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" Namespace="calico-apiserver" Pod="calico-apiserver-98d77d889-wn285" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wn285-eth0" Oct 2 19:25:19.262909 env[1059]: 2023-10-02 19:25:19.236 [INFO][4331] dataplane_linux.go 68: Setting the host side veth name to cali183c288ea0d ContainerID="0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" Namespace="calico-apiserver" Pod="calico-apiserver-98d77d889-wn285" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wn285-eth0" Oct 2 19:25:19.262909 env[1059]: 2023-10-02 19:25:19.236 [INFO][4331] dataplane_linux.go 473: Disabling IPv4 forwarding ContainerID="0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" Namespace="calico-apiserver" Pod="calico-apiserver-98d77d889-wn285" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wn285-eth0" Oct 2 19:25:19.262909 env[1059]: 2023-10-02 19:25:19.244 [INFO][4331] k8s.go 411: Added Mac, interface name, and active container ID to endpoint ContainerID="0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" Namespace="calico-apiserver" Pod="calico-apiserver-98d77d889-wn285" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wn285-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wn285-eth0", GenerateName:"calico-apiserver-98d77d889-", Namespace:"calico-apiserver", SelfLink:"", UID:"1769c51c-53d7-4d61-b4e7-cb4a88b27c95", ResourceVersion:"818", Generation:0, CreationTimestamp:time.Date(2023, time.October, 2, 19, 25, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"98d77d889", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ZZZ_DeprecatedClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-0-4-c08ee46f57.novalocal", ContainerID:"0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc", Pod:"calico-apiserver-98d77d889-wn285", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.122.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali183c288ea0d", MAC:"8e:9d:14:4a:d7:7b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Oct 2 19:25:19.262909 env[1059]: 2023-10-02 19:25:19.259 [INFO][4331] k8s.go 489: Wrote updated endpoint to datastore ContainerID="0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc" Namespace="calico-apiserver" Pod="calico-apiserver-98d77d889-wn285" WorkloadEndpoint="ci--3510--3--0--4--c08ee46f57.novalocal-k8s-calico--apiserver--98d77d889--wn285-eth0" Oct 2 19:25:19.271779 systemd[1]: Started cri-containerd-d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e.scope. Oct 2 19:25:19.295708 env[1059]: time="2023-10-02T19:25:19.295631757Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:25:19.295919 env[1059]: time="2023-10-02T19:25:19.295894278Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:25:19.296013 env[1059]: time="2023-10-02T19:25:19.295990738Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:25:19.296195 env[1059]: time="2023-10-02T19:25:19.296169402Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc pid=4424 runtime=io.containerd.runc.v2 Oct 2 19:25:19.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.298000 audit: BPF prog-id=177 op=LOAD Oct 2 19:25:19.299000 audit[4390]: AVC avc: denied { bpf } for pid=4390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.299000 audit[4390]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4377 pid=4390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:19.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437333566333266333664323030656534346339356261303734666363 Oct 2 19:25:19.300000 audit[4390]: AVC avc: denied { perfmon } for pid=4390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.300000 audit[4390]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4377 pid=4390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:19.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437333566333266333664323030656534346339356261303734666363 Oct 2 19:25:19.300000 audit[4390]: AVC avc: denied { bpf } for pid=4390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.300000 audit[4390]: AVC avc: denied { bpf } for pid=4390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.300000 audit[4390]: AVC avc: denied { bpf } for pid=4390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.300000 audit[4390]: AVC avc: denied { perfmon } for pid=4390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.300000 audit[4390]: AVC avc: denied { perfmon } for pid=4390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.300000 audit[4390]: AVC avc: denied { perfmon } for pid=4390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.300000 audit[4390]: AVC avc: denied { perfmon } for pid=4390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.300000 audit[4390]: AVC avc: denied { perfmon } for pid=4390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.300000 audit[4390]: AVC avc: denied { bpf } for pid=4390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.300000 audit[4390]: AVC avc: denied { bpf } for pid=4390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.300000 audit: BPF prog-id=178 op=LOAD Oct 2 19:25:19.300000 audit[4390]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003d64e0 items=0 ppid=4377 pid=4390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:19.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437333566333266333664323030656534346339356261303734666363 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { bpf } for pid=4390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { bpf } for pid=4390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { perfmon } for pid=4390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { perfmon } for pid=4390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { perfmon } for pid=4390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { perfmon } for pid=4390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { perfmon } for pid=4390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { bpf } for pid=4390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { bpf } for pid=4390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit: BPF prog-id=179 op=LOAD Oct 2 19:25:19.302000 audit[4390]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003d6528 items=0 ppid=4377 pid=4390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:19.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437333566333266333664323030656534346339356261303734666363 Oct 2 19:25:19.302000 audit: BPF prog-id=179 op=UNLOAD Oct 2 19:25:19.302000 audit: BPF prog-id=178 op=UNLOAD Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { bpf } for pid=4390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { bpf } for pid=4390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { bpf } for pid=4390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { perfmon } for pid=4390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { perfmon } for pid=4390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { perfmon } for pid=4390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { perfmon } for pid=4390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { perfmon } for pid=4390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { bpf } for pid=4390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit[4390]: AVC avc: denied { bpf } for pid=4390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.302000 audit: BPF prog-id=180 op=LOAD Oct 2 19:25:19.302000 audit[4390]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003d6938 items=0 ppid=4377 pid=4390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:19.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437333566333266333664323030656534346339356261303734666363 Oct 2 19:25:19.291000 audit[4405]: NETFILTER_CFG table=filter:131 family=2 entries=59 op=nft_register_chain pid=4405 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:25:19.291000 audit[4405]: SYSCALL arch=c000003e syscall=46 success=yes exit=29292 a0=3 a1=7ffe0d478290 a2=0 a3=7ffe0d47827c items=0 ppid=3198 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:19.291000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:25:19.340185 systemd[1]: Started cri-containerd-0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc.scope. Oct 2 19:25:19.363000 audit[4457]: NETFILTER_CFG table=filter:132 family=2 entries=50 op=nft_register_chain pid=4457 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Oct 2 19:25:19.363000 audit[4457]: SYSCALL arch=c000003e syscall=46 success=yes exit=24496 a0=3 a1=7ffd1f1d2ac0 a2=0 a3=7ffd1f1d2aac items=0 ppid=3198 pid=4457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:19.363000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Oct 2 19:25:19.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.369000 audit: BPF prog-id=181 op=LOAD Oct 2 19:25:19.372074 env[1059]: time="2023-10-02T19:25:19.372044642Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-98d77d889-wk8jm,Uid:3110c6fa-c38b-474a-8c36-3d8ab1342f53,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"d735f32f36d200ee44c95ba074fcc054a04fd4e0184133efa44a12e2b5a9be3e\"" Oct 2 19:25:19.371000 audit[4434]: AVC avc: denied { bpf } for pid=4434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.371000 audit[4434]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4424 pid=4434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:19.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066316165656435663035316464366230346163633465363836316135 Oct 2 19:25:19.371000 audit[4434]: AVC avc: denied { perfmon } for pid=4434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.371000 audit[4434]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4424 pid=4434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:19.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066316165656435663035316464366230346163633465363836316135 Oct 2 19:25:19.371000 audit[4434]: AVC avc: denied { bpf } for pid=4434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.371000 audit[4434]: AVC avc: denied { bpf } for pid=4434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.371000 audit[4434]: AVC avc: denied { bpf } for pid=4434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.371000 audit[4434]: AVC avc: denied { perfmon } for pid=4434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.371000 audit[4434]: AVC avc: denied { perfmon } for pid=4434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.371000 audit[4434]: AVC avc: denied { perfmon } for pid=4434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.371000 audit[4434]: AVC avc: denied { perfmon } for pid=4434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.371000 audit[4434]: AVC avc: denied { perfmon } for pid=4434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.371000 audit[4434]: AVC avc: denied { bpf } for pid=4434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.371000 audit[4434]: AVC avc: denied { bpf } for pid=4434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.371000 audit: BPF prog-id=182 op=LOAD Oct 2 19:25:19.371000 audit[4434]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003dca30 items=0 ppid=4424 pid=4434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:19.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066316165656435663035316464366230346163633465363836316135 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { bpf } for pid=4434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { bpf } for pid=4434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { perfmon } for pid=4434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { perfmon } for pid=4434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { perfmon } for pid=4434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { perfmon } for pid=4434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { perfmon } for pid=4434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { bpf } for pid=4434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { bpf } for pid=4434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit: BPF prog-id=183 op=LOAD Oct 2 19:25:19.372000 audit[4434]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003dca78 items=0 ppid=4424 pid=4434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:19.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066316165656435663035316464366230346163633465363836316135 Oct 2 19:25:19.372000 audit: BPF prog-id=183 op=UNLOAD Oct 2 19:25:19.372000 audit: BPF prog-id=182 op=UNLOAD Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { bpf } for pid=4434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { bpf } for pid=4434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { bpf } for pid=4434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { perfmon } for pid=4434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { perfmon } for pid=4434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { perfmon } for pid=4434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { perfmon } for pid=4434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { perfmon } for pid=4434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { bpf } for pid=4434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit[4434]: AVC avc: denied { bpf } for pid=4434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:25:19.372000 audit: BPF prog-id=184 op=LOAD Oct 2 19:25:19.372000 audit[4434]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003dce88 items=0 ppid=4424 pid=4434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:19.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066316165656435663035316464366230346163633465363836316135 Oct 2 19:25:19.379047 env[1059]: time="2023-10-02T19:25:19.379005137Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:25:19.413919 env[1059]: time="2023-10-02T19:25:19.413842270Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-98d77d889-wn285,Uid:1769c51c-53d7-4d61-b4e7-cb4a88b27c95,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"0f1aeed5f051dd6b04acc4e6861a566f68561be656888fd9a5edc7b4f31346bc\"" Oct 2 19:25:19.639562 env[1059]: time="2023-10-02T19:25:19.639396461Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:25:19.641318 env[1059]: time="2023-10-02T19:25:19.641144342Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:25:19.641954 kubelet[1964]: E1002 19:25:19.641898 1964 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:25:19.642352 kubelet[1964]: E1002 19:25:19.642326 1964 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:25:19.643006 kubelet[1964]: E1002 19:25:19.642972 1964 kuberuntime_manager.go:872] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-hr8bd,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-98d77d889-wk8jm_calico-apiserver(3110c6fa-c38b-474a-8c36-3d8ab1342f53): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:25:19.643489 kubelet[1964]: E1002 19:25:19.643463 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-98d77d889-wk8jm" podUID=3110c6fa-c38b-474a-8c36-3d8ab1342f53 Oct 2 19:25:19.645014 env[1059]: time="2023-10-02T19:25:19.644883680Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:25:19.891588 env[1059]: time="2023-10-02T19:25:19.891267932Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:25:19.896483 env[1059]: time="2023-10-02T19:25:19.896314516Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:25:19.897290 kubelet[1964]: E1002 19:25:19.897212 1964 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:25:19.898007 kubelet[1964]: E1002 19:25:19.897371 1964 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:25:19.898237 kubelet[1964]: E1002 19:25:19.898157 1964 kuberuntime_manager.go:872] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fnds7,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-98d77d889-wn285_calico-apiserver(1769c51c-53d7-4d61-b4e7-cb4a88b27c95): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:25:19.898484 kubelet[1964]: E1002 19:25:19.898338 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-98d77d889-wn285" podUID=1769c51c-53d7-4d61-b4e7-cb4a88b27c95 Oct 2 19:25:20.299244 systemd-networkd[974]: cali183c288ea0d: Gained IPv6LL Oct 2 19:25:20.302282 systemd-networkd[974]: cali3b2ca9a7d3e: Gained IPv6LL Oct 2 19:25:20.520192 kubelet[1964]: E1002 19:25:20.520097 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-98d77d889-wn285" podUID=1769c51c-53d7-4d61-b4e7-cb4a88b27c95 Oct 2 19:25:20.520601 kubelet[1964]: E1002 19:25:20.520566 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-98d77d889-wk8jm" podUID=3110c6fa-c38b-474a-8c36-3d8ab1342f53 Oct 2 19:25:20.633879 kernel: kauditd_printk_skb: 179 callbacks suppressed Oct 2 19:25:20.633994 kernel: audit: type=1325 audit(1696274720.626:1380): table=filter:133 family=2 entries=8 op=nft_register_rule pid=4491 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:20.634026 kernel: audit: type=1300 audit(1696274720.626:1380): arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffe0844fea0 a2=0 a3=7ffe0844fe8c items=0 ppid=2123 pid=4491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:20.626000 audit[4491]: NETFILTER_CFG table=filter:133 family=2 entries=8 op=nft_register_rule pid=4491 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:20.626000 audit[4491]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffe0844fea0 a2=0 a3=7ffe0844fe8c items=0 ppid=2123 pid=4491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:20.626000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:20.637974 kernel: audit: type=1327 audit(1696274720.626:1380): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:20.628000 audit[4491]: NETFILTER_CFG table=nat:134 family=2 entries=78 op=nft_register_rule pid=4491 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:20.628000 audit[4491]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffe0844fea0 a2=0 a3=7ffe0844fe8c items=0 ppid=2123 pid=4491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:20.647959 kernel: audit: type=1325 audit(1696274720.628:1381): table=nat:134 family=2 entries=78 op=nft_register_rule pid=4491 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:20.648007 kernel: audit: type=1300 audit(1696274720.628:1381): arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffe0844fea0 a2=0 a3=7ffe0844fe8c items=0 ppid=2123 pid=4491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:20.628000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:20.650813 kernel: audit: type=1327 audit(1696274720.628:1381): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:20.702000 audit[4517]: NETFILTER_CFG table=filter:135 family=2 entries=8 op=nft_register_rule pid=4517 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:20.702000 audit[4517]: SYSCALL arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffde7cc7520 a2=0 a3=7ffde7cc750c items=0 ppid=2123 pid=4517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:20.723545 kernel: audit: type=1325 audit(1696274720.702:1382): table=filter:135 family=2 entries=8 op=nft_register_rule pid=4517 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:20.723636 kernel: audit: type=1300 audit(1696274720.702:1382): arch=c000003e syscall=46 success=yes exit=2620 a0=3 a1=7ffde7cc7520 a2=0 a3=7ffde7cc750c items=0 ppid=2123 pid=4517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:20.702000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:20.729895 kernel: audit: type=1327 audit(1696274720.702:1382): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:20.705000 audit[4517]: NETFILTER_CFG table=nat:136 family=2 entries=78 op=nft_register_rule pid=4517 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:20.741892 kernel: audit: type=1325 audit(1696274720.705:1383): table=nat:136 family=2 entries=78 op=nft_register_rule pid=4517 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:25:20.705000 audit[4517]: SYSCALL arch=c000003e syscall=46 success=yes exit=24988 a0=3 a1=7ffde7cc7520 a2=0 a3=7ffde7cc750c items=0 ppid=2123 pid=4517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:20.705000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:25:21.158723 env[1059]: time="2023-10-02T19:25:21.158543957Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:25:21.405561 env[1059]: time="2023-10-02T19:25:21.405426850Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:25:21.407346 env[1059]: time="2023-10-02T19:25:21.407261392Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:25:21.407829 kubelet[1964]: E1002 19:25:21.407792 1964 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:25:21.408489 kubelet[1964]: E1002 19:25:21.408461 1964 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:25:21.408940 kubelet[1964]: E1002 19:25:21.408802 1964 kuberuntime_manager.go:872] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-8d7hl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-wnlh4_calico-system(483f9644-0527-42b0-9e55-0a552dc084ac): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:25:21.411822 env[1059]: time="2023-10-02T19:25:21.411756505Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:25:21.640470 env[1059]: time="2023-10-02T19:25:21.640342465Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:25:21.642737 env[1059]: time="2023-10-02T19:25:21.642555948Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:25:21.643411 kubelet[1964]: E1002 19:25:21.643376 1964 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:25:21.643649 kubelet[1964]: E1002 19:25:21.643625 1964 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:25:21.644161 kubelet[1964]: E1002 19:25:21.644128 1964 kuberuntime_manager.go:872] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8d7hl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-wnlh4_calico-system(483f9644-0527-42b0-9e55-0a552dc084ac): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:25:21.644654 kubelet[1964]: E1002 19:25:21.644622 1964 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-wnlh4" podUID=483f9644-0527-42b0-9e55-0a552dc084ac Oct 2 19:25:24.067234 systemd[1]: Started sshd@7-172.24.4.120:22-172.24.4.1:33908.service. Oct 2 19:25:24.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.120:22-172.24.4.1:33908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:24.619806 systemd[1]: run-containerd-runc-k8s.io-b5d80e716537a62e9600393e457ae0dac07cc9ebe425c5ae443cb179bc1ffe7a-runc.KZxW6N.mount: Deactivated successfully. Oct 2 19:25:24.910132 systemd[1]: run-containerd-runc-k8s.io-a6144662bde73f18c4e1129621a7c04b7f69df17c0e2f7ff6637f98e99f7b927-runc.RVCesf.mount: Deactivated successfully. Oct 2 19:25:25.472000 audit[4532]: USER_ACCT pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:25.475050 sshd[4532]: Accepted publickey for core from 172.24.4.1 port 33908 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:25:25.476000 audit[4532]: CRED_ACQ pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:25.476000 audit[4532]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcb960e60 a2=3 a3=0 items=0 ppid=1 pid=4532 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:25.476000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:25.480638 sshd[4532]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:25.492720 systemd-logind[1052]: New session 8 of user core. Oct 2 19:25:25.494055 systemd[1]: Started session-8.scope. Oct 2 19:25:25.506000 audit[4532]: USER_START pid=4532 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:25.510000 audit[4600]: CRED_ACQ pid=4600 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:26.432536 sshd[4532]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:26.436445 kernel: kauditd_printk_skb: 10 callbacks suppressed Oct 2 19:25:26.436569 kernel: audit: type=1106 audit(1696274726.433:1390): pid=4532 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:26.433000 audit[4532]: USER_END pid=4532 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:26.437587 systemd[1]: sshd@7-172.24.4.120:22-172.24.4.1:33908.service: Deactivated successfully. Oct 2 19:25:26.439451 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:25:26.433000 audit[4532]: CRED_DISP pid=4532 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:26.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.120:22-172.24.4.1:33908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:26.449572 kernel: audit: type=1104 audit(1696274726.433:1391): pid=4532 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:26.449682 kernel: audit: type=1131 audit(1696274726.435:1392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.120:22-172.24.4.1:33908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:26.449693 systemd-logind[1052]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:25:26.450795 systemd-logind[1052]: Removed session 8. Oct 2 19:25:33.158082 env[1059]: time="2023-10-02T19:25:33.157369891Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:25:33.400774 env[1059]: time="2023-10-02T19:25:33.400415378Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:25:33.402431 env[1059]: time="2023-10-02T19:25:33.402245682Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:25:33.402786 kubelet[1964]: E1002 19:25:33.402701 1964 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:25:33.403513 kubelet[1964]: E1002 19:25:33.402827 1964 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:25:33.403513 kubelet[1964]: E1002 19:25:33.403127 1964 kuberuntime_manager.go:872] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-hr8bd,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-98d77d889-wk8jm_calico-apiserver(3110c6fa-c38b-474a-8c36-3d8ab1342f53): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:25:33.403513 kubelet[1964]: E1002 19:25:33.403225 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-98d77d889-wk8jm" podUID=3110c6fa-c38b-474a-8c36-3d8ab1342f53 Oct 2 19:25:34.159752 env[1059]: time="2023-10-02T19:25:34.159627459Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:25:34.412537 env[1059]: time="2023-10-02T19:25:34.412278780Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:25:34.414757 env[1059]: time="2023-10-02T19:25:34.414637079Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:25:34.415498 kubelet[1964]: E1002 19:25:34.415424 1964 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:25:34.416111 kubelet[1964]: E1002 19:25:34.415539 1964 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:25:34.416531 kubelet[1964]: E1002 19:25:34.416485 1964 kuberuntime_manager.go:872] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fnds7,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-98d77d889-wn285_calico-apiserver(1769c51c-53d7-4d61-b4e7-cb4a88b27c95): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:25:34.416830 kubelet[1964]: E1002 19:25:34.416592 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-98d77d889-wn285" podUID=1769c51c-53d7-4d61-b4e7-cb4a88b27c95 Oct 2 19:25:34.610590 systemd[1]: run-containerd-runc-k8s.io-b5d80e716537a62e9600393e457ae0dac07cc9ebe425c5ae443cb179bc1ffe7a-runc.iwi12h.mount: Deactivated successfully. Oct 2 19:25:34.893378 systemd[1]: run-containerd-runc-k8s.io-a6144662bde73f18c4e1129621a7c04b7f69df17c0e2f7ff6637f98e99f7b927-runc.cgsaHV.mount: Deactivated successfully. Oct 2 19:25:36.449673 systemd[1]: Started sshd@8-172.24.4.120:22-172.24.4.1:45038.service. Oct 2 19:25:36.450000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.120:22-172.24.4.1:45038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:36.461915 kernel: audit: type=1130 audit(1696274736.450:1393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.120:22-172.24.4.1:45038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:37.161788 kubelet[1964]: E1002 19:25:37.159989 1964 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-wnlh4" podUID=483f9644-0527-42b0-9e55-0a552dc084ac Oct 2 19:25:37.704000 audit[4683]: USER_ACCT pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:37.705419 sshd[4683]: Accepted publickey for core from 172.24.4.1 port 45038 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:25:37.715967 kernel: audit: type=1101 audit(1696274737.704:1394): pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:37.716000 audit[4683]: CRED_ACQ pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:37.734216 kernel: audit: type=1103 audit(1696274737.716:1395): pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:37.734466 kernel: audit: type=1006 audit(1696274737.716:1396): pid=4683 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 19:25:37.716000 audit[4683]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce847e020 a2=3 a3=0 items=0 ppid=1 pid=4683 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:37.736133 sshd[4683]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:37.746960 kernel: audit: type=1300 audit(1696274737.716:1396): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce847e020 a2=3 a3=0 items=0 ppid=1 pid=4683 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:37.716000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:37.753896 kernel: audit: type=1327 audit(1696274737.716:1396): proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:37.760630 systemd-logind[1052]: New session 9 of user core. Oct 2 19:25:37.763801 systemd[1]: Started session-9.scope. Oct 2 19:25:37.776000 audit[4683]: USER_START pid=4683 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:37.790642 kernel: audit: type=1105 audit(1696274737.776:1397): pid=4683 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:37.790964 kernel: audit: type=1103 audit(1696274737.789:1398): pid=4692 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:37.789000 audit[4692]: CRED_ACQ pid=4692 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:38.520830 sshd[4683]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:38.522000 audit[4683]: USER_END pid=4683 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:38.522000 audit[4683]: CRED_DISP pid=4683 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:38.538286 systemd-logind[1052]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:25:38.541525 systemd[1]: sshd@8-172.24.4.120:22-172.24.4.1:45038.service: Deactivated successfully. Oct 2 19:25:38.545804 kernel: audit: type=1106 audit(1696274738.522:1399): pid=4683 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:38.545962 kernel: audit: type=1104 audit(1696274738.522:1400): pid=4683 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:38.543975 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:25:38.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.120:22-172.24.4.1:45038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:38.549281 systemd-logind[1052]: Removed session 9. Oct 2 19:25:44.601399 systemd[1]: run-containerd-runc-k8s.io-b5d80e716537a62e9600393e457ae0dac07cc9ebe425c5ae443cb179bc1ffe7a-runc.B53wTh.mount: Deactivated successfully. Oct 2 19:25:44.890657 systemd[1]: run-containerd-runc-k8s.io-a6144662bde73f18c4e1129621a7c04b7f69df17c0e2f7ff6637f98e99f7b927-runc.kHIx3p.mount: Deactivated successfully. Oct 2 19:25:48.157940 kubelet[1964]: E1002 19:25:48.157901 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-98d77d889-wk8jm" podUID=3110c6fa-c38b-474a-8c36-3d8ab1342f53 Oct 2 19:25:48.536293 systemd[1]: Started sshd@9-172.24.4.120:22-172.24.4.1:58538.service. Oct 2 19:25:48.536000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.120:22-172.24.4.1:58538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:48.540676 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:25:48.540811 kernel: audit: type=1130 audit(1696274748.536:1402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.120:22-172.24.4.1:58538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:49.155790 kubelet[1964]: E1002 19:25:49.155758 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-98d77d889-wn285" podUID=1769c51c-53d7-4d61-b4e7-cb4a88b27c95 Oct 2 19:25:49.652000 audit[4770]: USER_ACCT pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:49.653441 sshd[4770]: Accepted publickey for core from 172.24.4.1 port 58538 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:25:49.664979 kernel: audit: type=1101 audit(1696274749.652:1403): pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:49.663000 audit[4770]: CRED_ACQ pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:49.665990 sshd[4770]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:49.675912 kernel: audit: type=1103 audit(1696274749.663:1404): pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:49.683945 kernel: audit: type=1006 audit(1696274749.663:1405): pid=4770 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:25:49.663000 audit[4770]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe98cbb880 a2=3 a3=0 items=0 ppid=1 pid=4770 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.698918 kernel: audit: type=1300 audit(1696274749.663:1405): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe98cbb880 a2=3 a3=0 items=0 ppid=1 pid=4770 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:49.663000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:49.703922 kernel: audit: type=1327 audit(1696274749.663:1405): proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:49.707976 systemd-logind[1052]: New session 10 of user core. Oct 2 19:25:49.710839 systemd[1]: Started session-10.scope. Oct 2 19:25:49.722000 audit[4770]: USER_START pid=4770 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:49.722000 audit[4774]: CRED_ACQ pid=4774 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:49.747028 kernel: audit: type=1105 audit(1696274749.722:1406): pid=4770 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:49.747181 kernel: audit: type=1103 audit(1696274749.722:1407): pid=4774 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:50.476235 sshd[4770]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:50.481000 audit[4770]: USER_END pid=4770 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:50.483169 systemd[1]: Started sshd@10-172.24.4.120:22-172.24.4.1:58550.service. Oct 2 19:25:50.495038 kernel: audit: type=1106 audit(1696274750.481:1408): pid=4770 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:50.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.120:22-172.24.4.1:58550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:50.507902 kernel: audit: type=1130 audit(1696274750.495:1409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.120:22-172.24.4.1:58550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:50.495000 audit[4770]: CRED_DISP pid=4770 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:50.511065 systemd[1]: sshd@9-172.24.4.120:22-172.24.4.1:58538.service: Deactivated successfully. Oct 2 19:25:50.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.120:22-172.24.4.1:58538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:50.512831 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:25:50.514381 systemd-logind[1052]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:25:50.517335 systemd-logind[1052]: Removed session 10. Oct 2 19:25:51.904000 audit[4786]: USER_ACCT pid=4786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:51.906334 sshd[4786]: Accepted publickey for core from 172.24.4.1 port 58550 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:25:51.908000 audit[4786]: CRED_ACQ pid=4786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:51.909000 audit[4786]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4afb0730 a2=3 a3=0 items=0 ppid=1 pid=4786 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:51.909000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:51.912251 sshd[4786]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:51.923966 systemd-logind[1052]: New session 11 of user core. Oct 2 19:25:51.925991 systemd[1]: Started session-11.scope. Oct 2 19:25:51.939000 audit[4786]: USER_START pid=4786 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:51.942000 audit[4791]: CRED_ACQ pid=4791 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:52.158032 env[1059]: time="2023-10-02T19:25:52.157787079Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\"" Oct 2 19:25:52.427550 env[1059]: time="2023-10-02T19:25:52.427296004Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:25:52.429396 env[1059]: time="2023-10-02T19:25:52.429275012Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:25:52.430008 kubelet[1964]: E1002 19:25:52.429931 1964 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:25:52.430629 kubelet[1964]: E1002 19:25:52.430051 1964 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/csi:v3.25.0" Oct 2 19:25:52.430629 kubelet[1964]: E1002 19:25:52.430245 1964 kuberuntime_manager.go:872] container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.25.0,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:etccalico,ReadOnly:false,MountPath:/etc/calico,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,},VolumeMount{Name:kube-api-access-8d7hl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-wnlh4_calico-system(483f9644-0527-42b0-9e55-0a552dc084ac): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/csi:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/csi:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:25:52.432793 env[1059]: time="2023-10-02T19:25:52.432372136Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\"" Oct 2 19:25:52.700849 env[1059]: time="2023-10-02T19:25:52.700685166Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:25:52.702886 env[1059]: time="2023-10-02T19:25:52.702764447Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:25:52.703370 kubelet[1964]: E1002 19:25:52.703313 1964 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:25:52.703370 kubelet[1964]: E1002 19:25:52.703362 1964 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0" Oct 2 19:25:52.703579 kubelet[1964]: E1002 19:25:52.703442 1964 kuberuntime_manager.go:872] container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8d7hl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*true,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod csi-node-driver-wnlh4_calico-system(483f9644-0527-42b0-9e55-0a552dc084ac): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:25:52.703579 kubelet[1964]: E1002 19:25:52.703505 1964 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/csi-node-driver-wnlh4" podUID=483f9644-0527-42b0-9e55-0a552dc084ac Oct 2 19:25:54.006904 sshd[4786]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:54.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.120:22-172.24.4.1:58552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:54.010059 systemd[1]: Started sshd@11-172.24.4.120:22-172.24.4.1:58552.service. Oct 2 19:25:54.011682 kernel: kauditd_printk_skb: 9 callbacks suppressed Oct 2 19:25:54.014392 kernel: audit: type=1130 audit(1696274754.009:1417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.120:22-172.24.4.1:58552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:54.018000 audit[4786]: USER_END pid=4786 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:54.032282 kernel: audit: type=1106 audit(1696274754.018:1418): pid=4786 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:54.018000 audit[4786]: CRED_DISP pid=4786 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:54.045003 kernel: audit: type=1104 audit(1696274754.018:1419): pid=4786 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:54.043553 systemd[1]: sshd@10-172.24.4.120:22-172.24.4.1:58550.service: Deactivated successfully. Oct 2 19:25:54.060842 kernel: audit: type=1131 audit(1696274754.043:1420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.120:22-172.24.4.1:58550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:54.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.120:22-172.24.4.1:58550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:54.048387 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:25:54.063760 systemd-logind[1052]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:25:54.067192 systemd-logind[1052]: Removed session 11. Oct 2 19:25:54.608053 systemd[1]: run-containerd-runc-k8s.io-b5d80e716537a62e9600393e457ae0dac07cc9ebe425c5ae443cb179bc1ffe7a-runc.sWKbAD.mount: Deactivated successfully. Oct 2 19:25:54.894658 systemd[1]: run-containerd-runc-k8s.io-a6144662bde73f18c4e1129621a7c04b7f69df17c0e2f7ff6637f98e99f7b927-runc.8NxXNN.mount: Deactivated successfully. Oct 2 19:25:55.393000 audit[4803]: USER_ACCT pid=4803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:55.404583 sshd[4803]: Accepted publickey for core from 172.24.4.1 port 58552 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:25:55.404315 sshd[4803]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:25:55.409931 kernel: audit: type=1101 audit(1696274755.393:1421): pid=4803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:55.402000 audit[4803]: CRED_ACQ pid=4803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:55.437522 kernel: audit: type=1103 audit(1696274755.402:1422): pid=4803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:55.437673 kernel: audit: type=1006 audit(1696274755.402:1423): pid=4803 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:25:55.438366 kernel: audit: type=1300 audit(1696274755.402:1423): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff3390b400 a2=3 a3=0 items=0 ppid=1 pid=4803 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:55.402000 audit[4803]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff3390b400 a2=3 a3=0 items=0 ppid=1 pid=4803 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:25:55.402000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:55.453725 kernel: audit: type=1327 audit(1696274755.402:1423): proctitle=737368643A20636F7265205B707269765D Oct 2 19:25:55.458424 systemd-logind[1052]: New session 12 of user core. Oct 2 19:25:55.461940 systemd[1]: Started session-12.scope. Oct 2 19:25:55.475000 audit[4803]: USER_START pid=4803 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:55.483008 kernel: audit: type=1105 audit(1696274755.475:1424): pid=4803 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:55.478000 audit[4873]: CRED_ACQ pid=4873 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:56.351169 sshd[4803]: pam_unix(sshd:session): session closed for user core Oct 2 19:25:56.351000 audit[4803]: USER_END pid=4803 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:56.352000 audit[4803]: CRED_DISP pid=4803 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:25:56.355081 systemd[1]: sshd@11-172.24.4.120:22-172.24.4.1:58552.service: Deactivated successfully. Oct 2 19:25:56.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.120:22-172.24.4.1:58552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:25:56.356267 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:25:56.357828 systemd-logind[1052]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:25:56.360187 systemd-logind[1052]: Removed session 12. Oct 2 19:26:01.157238 env[1059]: time="2023-10-02T19:26:01.156643429Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:26:01.404209 env[1059]: time="2023-10-02T19:26:01.404066626Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:26:01.409116 env[1059]: time="2023-10-02T19:26:01.408608332Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:26:01.410020 kubelet[1964]: E1002 19:26:01.409849 1964 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:26:01.410641 kubelet[1964]: E1002 19:26:01.410086 1964 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:26:01.411740 kubelet[1964]: E1002 19:26:01.411681 1964 kuberuntime_manager.go:872] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-hr8bd,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-98d77d889-wk8jm_calico-apiserver(3110c6fa-c38b-474a-8c36-3d8ab1342f53): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:26:01.412067 kubelet[1964]: E1002 19:26:01.411879 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-98d77d889-wk8jm" podUID=3110c6fa-c38b-474a-8c36-3d8ab1342f53 Oct 2 19:26:02.158029 env[1059]: time="2023-10-02T19:26:02.157884441Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\"" Oct 2 19:26:02.415611 env[1059]: time="2023-10-02T19:26:02.415335093Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io Oct 2 19:26:02.417339 env[1059]: time="2023-10-02T19:26:02.417200256Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.25.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" Oct 2 19:26:02.417597 kubelet[1964]: E1002 19:26:02.417540 1964 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:26:02.418305 kubelet[1964]: E1002 19:26:02.417610 1964 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.25.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/apiserver:v3.25.0" Oct 2 19:26:02.418305 kubelet[1964]: E1002 19:26:02.417767 1964 kuberuntime_manager.go:872] container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.25.0,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-fnds7,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/version,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:90,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/code/filecheck],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:5,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:*false,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod calico-apiserver-98d77d889-wn285_calico-apiserver(1769c51c-53d7-4d61-b4e7-cb4a88b27c95): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to resolve reference "ghcr.io/flatcar/calico/apiserver:v3.25.0": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden Oct 2 19:26:02.418305 kubelet[1964]: E1002 19:26:02.417842 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-apiserver/calico-apiserver-98d77d889-wn285" podUID=1769c51c-53d7-4d61-b4e7-cb4a88b27c95 Oct 2 19:26:04.605190 systemd[1]: run-containerd-runc-k8s.io-b5d80e716537a62e9600393e457ae0dac07cc9ebe425c5ae443cb179bc1ffe7a-runc.lJW579.mount: Deactivated successfully. Oct 2 19:26:04.908915 systemd[1]: run-containerd-runc-k8s.io-a6144662bde73f18c4e1129621a7c04b7f69df17c0e2f7ff6637f98e99f7b927-runc.4qichO.mount: Deactivated successfully. Oct 2 19:26:05.592800 systemd[1]: run-containerd-runc-k8s.io-a6144662bde73f18c4e1129621a7c04b7f69df17c0e2f7ff6637f98e99f7b927-runc.82glQu.mount: Deactivated successfully. Oct 2 19:26:06.158927 kubelet[1964]: E1002 19:26:06.158896 1964 pod_workers.go:965] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.25.0\\\"\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.25.0\\\"\"]" pod="calico-system/csi-node-driver-wnlh4" podUID=483f9644-0527-42b0-9e55-0a552dc084ac Oct 2 19:26:06.365330 systemd[1]: Started sshd@12-172.24.4.120:22-172.24.4.1:54698.service. Oct 2 19:26:06.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.120:22-172.24.4.1:54698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:06.371903 kernel: kauditd_printk_skb: 4 callbacks suppressed Oct 2 19:26:06.372030 kernel: audit: type=1130 audit(1696274766.364:1429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.120:22-172.24.4.1:54698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:07.477000 audit[4950]: USER_ACCT pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:26:07.480449 sshd[4950]: Accepted publickey for core from 172.24.4.1 port 54698 ssh2: RSA SHA256:Bv3eaC0v7VyviMzATjRnqd9o1H3jZsSCHmhEaYGNTBQ Oct 2 19:26:07.488000 audit[4950]: CRED_ACQ pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:26:07.490996 kernel: audit: type=1101 audit(1696274767.477:1430): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:26:07.491036 kernel: audit: type=1103 audit(1696274767.488:1431): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:26:07.491373 sshd[4950]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:26:07.508294 kernel: audit: type=1006 audit(1696274767.488:1432): pid=4950 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:26:07.488000 audit[4950]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda7eb8990 a2=3 a3=0 items=0 ppid=1 pid=4950 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:07.513826 systemd-logind[1052]: New session 13 of user core. Oct 2 19:26:07.517654 systemd[1]: Started session-13.scope. Oct 2 19:26:07.525017 kernel: audit: type=1300 audit(1696274767.488:1432): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda7eb8990 a2=3 a3=0 items=0 ppid=1 pid=4950 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:26:07.525095 kernel: audit: type=1327 audit(1696274767.488:1432): proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:07.488000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:26:07.523000 audit[4950]: USER_START pid=4950 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:26:07.543041 kernel: audit: type=1105 audit(1696274767.523:1433): pid=4950 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:26:07.525000 audit[4953]: CRED_ACQ pid=4953 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:26:07.553714 kernel: audit: type=1103 audit(1696274767.525:1434): pid=4953 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:26:07.695000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:07.695000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00106d360 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:26:07.719372 kernel: audit: type=1400 audit(1696274767.695:1435): avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:07.719582 kernel: audit: type=1300 audit(1696274767.695:1435): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00106d360 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:26:07.695000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:07.695000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525624 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:07.695000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00102f8c0 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:26:07.695000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:08.265142 sshd[4950]: pam_unix(sshd:session): session closed for user core Oct 2 19:26:08.265000 audit[4950]: USER_END pid=4950 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:26:08.266000 audit[4950]: CRED_DISP pid=4950 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 19:26:08.268000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.120:22-172.24.4.1:54698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:26:08.268806 systemd[1]: sshd@12-172.24.4.120:22-172.24.4.1:54698.service: Deactivated successfully. Oct 2 19:26:08.269664 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:26:08.271086 systemd-logind[1052]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:26:08.272140 systemd-logind[1052]: Removed session 13. Oct 2 19:26:09.465000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525624 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:09.465000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c00c21c420 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:26:09.465000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:26:09.466000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:09.466000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c002b7dae0 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:26:09.466000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:26:09.472000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525620 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:09.472000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c00c4a4450 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:26:09.472000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:26:09.479000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525626 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:09.479000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c00c4a4480 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:26:09.479000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:26:09.509000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:09.509000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c01121e280 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:26:09.509000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:26:09.510000 audit[1827]: AVC avc: denied { watch } for pid=1827 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525624 scontext=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:09.510000 audit[1827]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00c4a44b0 a2=fc6 a3=0 items=0 ppid=1671 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c419,c816 key=(null) Oct 2 19:26:09.510000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:26:12.156475 kubelet[1964]: E1002 19:26:12.156397 1964 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.25.0\\\"\"" pod="calico-apiserver/calico-apiserver-98d77d889-wk8jm" podUID=3110c6fa-c38b-474a-8c36-3d8ab1342f53 Oct 2 19:26:13.127980 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:26:13.128227 kernel: audit: type=1400 audit(1696274773.121:1446): avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:13.121000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:13.121000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010aec40 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:26:13.147801 kernel: audit: type=1300 audit(1696274773.121:1446): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010aec40 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:26:13.148029 kernel: audit: type=1327 audit(1696274773.121:1446): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:13.121000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:13.121000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:13.173790 kernel: audit: type=1400 audit(1696274773.121:1447): avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:13.174093 kernel: audit: type=1300 audit(1696274773.121:1447): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010aec60 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:26:13.121000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010aec60 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:26:13.121000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:13.198540 kernel: audit: type=1327 audit(1696274773.121:1447): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:13.198779 kernel: audit: type=1400 audit(1696274773.124:1448): avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:13.124000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:13.124000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00106dbc0 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:26:13.209723 kernel: audit: type=1300 audit(1696274773.124:1448): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00106dbc0 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:26:13.209947 kernel: audit: type=1327 audit(1696274773.124:1448): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:13.124000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:26:13.125000 audit[1844]: AVC avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:13.219105 kernel: audit: type=1400 audit(1696274773.125:1449): avc: denied { watch } for pid=1844 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525353 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:26:13.125000 audit[1844]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010aef80 a2=fc6 a3=0 items=0 ppid=1722 pid=1844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c904 key=(null) Oct 2 19:26:13.125000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269