Oct 2 20:03:20.057748 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 20:03:20.057793 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:03:20.057818 kernel: BIOS-provided physical RAM map: Oct 2 20:03:20.057833 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 20:03:20.057847 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 20:03:20.057861 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 20:03:20.057878 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007ffdcfff] usable Oct 2 20:03:20.057915 kernel: BIOS-e820: [mem 0x000000007ffdd000-0x000000007fffffff] reserved Oct 2 20:03:20.057931 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Oct 2 20:03:20.057944 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 20:03:20.057956 kernel: NX (Execute Disable) protection: active Oct 2 20:03:20.057968 kernel: SMBIOS 2.8 present. Oct 2 20:03:20.057981 kernel: DMI: OpenStack Foundation OpenStack Nova, BIOS 1.15.0-1 04/01/2014 Oct 2 20:03:20.057993 kernel: Hypervisor detected: KVM Oct 2 20:03:20.058009 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 20:03:20.058025 kernel: kvm-clock: cpu 0, msr 66f8a001, primary cpu clock Oct 2 20:03:20.058038 kernel: kvm-clock: using sched offset of 5988896853 cycles Oct 2 20:03:20.058053 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 20:03:20.058067 kernel: tsc: Detected 1996.249 MHz processor Oct 2 20:03:20.058081 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 20:03:20.058095 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 20:03:20.058109 kernel: last_pfn = 0x7ffdd max_arch_pfn = 0x400000000 Oct 2 20:03:20.058123 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 20:03:20.058140 kernel: ACPI: Early table checksum verification disabled Oct 2 20:03:20.058154 kernel: ACPI: RSDP 0x00000000000F5930 000014 (v00 BOCHS ) Oct 2 20:03:20.058168 kernel: ACPI: RSDT 0x000000007FFE1848 000030 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:03:20.058182 kernel: ACPI: FACP 0x000000007FFE172C 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:03:20.058195 kernel: ACPI: DSDT 0x000000007FFE0040 0016EC (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:03:20.058209 kernel: ACPI: FACS 0x000000007FFE0000 000040 Oct 2 20:03:20.058223 kernel: ACPI: APIC 0x000000007FFE17A0 000080 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:03:20.058236 kernel: ACPI: WAET 0x000000007FFE1820 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:03:20.058250 kernel: ACPI: Reserving FACP table memory at [mem 0x7ffe172c-0x7ffe179f] Oct 2 20:03:20.058266 kernel: ACPI: Reserving DSDT table memory at [mem 0x7ffe0040-0x7ffe172b] Oct 2 20:03:20.058280 kernel: ACPI: Reserving FACS table memory at [mem 0x7ffe0000-0x7ffe003f] Oct 2 20:03:20.058293 kernel: ACPI: Reserving APIC table memory at [mem 0x7ffe17a0-0x7ffe181f] Oct 2 20:03:20.058307 kernel: ACPI: Reserving WAET table memory at [mem 0x7ffe1820-0x7ffe1847] Oct 2 20:03:20.058320 kernel: No NUMA configuration found Oct 2 20:03:20.058334 kernel: Faking a node at [mem 0x0000000000000000-0x000000007ffdcfff] Oct 2 20:03:20.058347 kernel: NODE_DATA(0) allocated [mem 0x7ffd7000-0x7ffdcfff] Oct 2 20:03:20.058361 kernel: Zone ranges: Oct 2 20:03:20.058383 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 20:03:20.058397 kernel: DMA32 [mem 0x0000000001000000-0x000000007ffdcfff] Oct 2 20:03:20.058411 kernel: Normal empty Oct 2 20:03:20.058426 kernel: Movable zone start for each node Oct 2 20:03:20.058440 kernel: Early memory node ranges Oct 2 20:03:20.058454 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 20:03:20.058471 kernel: node 0: [mem 0x0000000000100000-0x000000007ffdcfff] Oct 2 20:03:20.058486 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007ffdcfff] Oct 2 20:03:20.058500 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 20:03:20.058514 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 20:03:20.058528 kernel: On node 0, zone DMA32: 35 pages in unavailable ranges Oct 2 20:03:20.058543 kernel: ACPI: PM-Timer IO Port: 0x608 Oct 2 20:03:20.058557 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 20:03:20.058571 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Oct 2 20:03:20.058585 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Oct 2 20:03:20.058603 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 20:03:20.058617 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 20:03:20.058631 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 20:03:20.062712 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 20:03:20.062746 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 20:03:20.062763 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 20:03:20.062780 kernel: [mem 0x80000000-0xfeffbfff] available for PCI devices Oct 2 20:03:20.062796 kernel: Booting paravirtualized kernel on KVM Oct 2 20:03:20.062813 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 20:03:20.062830 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 20:03:20.062852 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 20:03:20.062869 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 20:03:20.062884 kernel: pcpu-alloc: [0] 0 1 Oct 2 20:03:20.062900 kernel: kvm-guest: stealtime: cpu 0, msr 7dc1c0c0 Oct 2 20:03:20.062916 kernel: kvm-guest: PV spinlocks disabled, no host support Oct 2 20:03:20.062932 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515805 Oct 2 20:03:20.062948 kernel: Policy zone: DMA32 Oct 2 20:03:20.062967 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:03:20.062988 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 20:03:20.063004 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 20:03:20.063020 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 20:03:20.063036 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 20:03:20.063053 kernel: Memory: 1975340K/2096620K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 121020K reserved, 0K cma-reserved) Oct 2 20:03:20.063069 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 20:03:20.063085 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 20:03:20.063101 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 20:03:20.063120 kernel: rcu: Hierarchical RCU implementation. Oct 2 20:03:20.063138 kernel: rcu: RCU event tracing is enabled. Oct 2 20:03:20.063154 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 20:03:20.063170 kernel: Rude variant of Tasks RCU enabled. Oct 2 20:03:20.063187 kernel: Tracing variant of Tasks RCU enabled. Oct 2 20:03:20.063203 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 20:03:20.063219 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 20:03:20.063235 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Oct 2 20:03:20.063251 kernel: Console: colour VGA+ 80x25 Oct 2 20:03:20.063267 kernel: printk: console [tty0] enabled Oct 2 20:03:20.063286 kernel: printk: console [ttyS0] enabled Oct 2 20:03:20.063302 kernel: ACPI: Core revision 20210730 Oct 2 20:03:20.063318 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 20:03:20.063334 kernel: x2apic enabled Oct 2 20:03:20.063351 kernel: Switched APIC routing to physical x2apic. Oct 2 20:03:20.063374 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Oct 2 20:03:20.063399 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Oct 2 20:03:20.063421 kernel: Calibrating delay loop (skipped) preset value.. 3992.49 BogoMIPS (lpj=1996249) Oct 2 20:03:20.063440 kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Oct 2 20:03:20.063468 kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 Oct 2 20:03:20.063493 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 20:03:20.063511 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 20:03:20.063525 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 20:03:20.063540 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 20:03:20.063555 kernel: Speculative Store Bypass: Vulnerable Oct 2 20:03:20.063569 kernel: x86/fpu: x87 FPU will use FXSAVE Oct 2 20:03:20.063583 kernel: Freeing SMP alternatives memory: 32K Oct 2 20:03:20.063598 kernel: pid_max: default: 32768 minimum: 301 Oct 2 20:03:20.063616 kernel: LSM: Security Framework initializing Oct 2 20:03:20.063630 kernel: SELinux: Initializing. Oct 2 20:03:20.063669 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 20:03:20.063686 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 20:03:20.063701 kernel: smpboot: CPU0: AMD Intel Core i7 9xx (Nehalem Class Core i7) (family: 0x6, model: 0x1a, stepping: 0x3) Oct 2 20:03:20.063715 kernel: Performance Events: AMD PMU driver. Oct 2 20:03:20.063729 kernel: ... version: 0 Oct 2 20:03:20.063744 kernel: ... bit width: 48 Oct 2 20:03:20.063758 kernel: ... generic registers: 4 Oct 2 20:03:20.063786 kernel: ... value mask: 0000ffffffffffff Oct 2 20:03:20.063801 kernel: ... max period: 00007fffffffffff Oct 2 20:03:20.063816 kernel: ... fixed-purpose events: 0 Oct 2 20:03:20.063834 kernel: ... event mask: 000000000000000f Oct 2 20:03:20.063849 kernel: signal: max sigframe size: 1440 Oct 2 20:03:20.063864 kernel: rcu: Hierarchical SRCU implementation. Oct 2 20:03:20.063879 kernel: smp: Bringing up secondary CPUs ... Oct 2 20:03:20.063894 kernel: x86: Booting SMP configuration: Oct 2 20:03:20.063912 kernel: .... node #0, CPUs: #1 Oct 2 20:03:20.063927 kernel: kvm-clock: cpu 1, msr 66f8a041, secondary cpu clock Oct 2 20:03:20.063942 kernel: kvm-guest: stealtime: cpu 1, msr 7dd1c0c0 Oct 2 20:03:20.063957 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 20:03:20.063972 kernel: smpboot: Max logical packages: 2 Oct 2 20:03:20.063987 kernel: smpboot: Total of 2 processors activated (7984.99 BogoMIPS) Oct 2 20:03:20.064002 kernel: devtmpfs: initialized Oct 2 20:03:20.064017 kernel: x86/mm: Memory block size: 128MB Oct 2 20:03:20.064033 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 20:03:20.064051 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 20:03:20.064066 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 20:03:20.064081 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 20:03:20.064096 kernel: audit: initializing netlink subsys (disabled) Oct 2 20:03:20.064111 kernel: audit: type=2000 audit(1696276999.430:1): state=initialized audit_enabled=0 res=1 Oct 2 20:03:20.064127 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 20:03:20.064142 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 20:03:20.064157 kernel: cpuidle: using governor menu Oct 2 20:03:20.064172 kernel: ACPI: bus type PCI registered Oct 2 20:03:20.064190 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 20:03:20.064205 kernel: dca service started, version 1.12.1 Oct 2 20:03:20.064220 kernel: PCI: Using configuration type 1 for base access Oct 2 20:03:20.064235 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 20:03:20.064250 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 20:03:20.064265 kernel: ACPI: Added _OSI(Module Device) Oct 2 20:03:20.064280 kernel: ACPI: Added _OSI(Processor Device) Oct 2 20:03:20.064295 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 20:03:20.064310 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 20:03:20.064328 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 20:03:20.064343 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 20:03:20.064358 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 20:03:20.064373 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 20:03:20.064388 kernel: ACPI: Interpreter enabled Oct 2 20:03:20.064402 kernel: ACPI: PM: (supports S0 S3 S5) Oct 2 20:03:20.064417 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 20:03:20.064433 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 20:03:20.064448 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Oct 2 20:03:20.064466 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 20:03:20.064768 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Oct 2 20:03:20.064934 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Oct 2 20:03:20.064958 kernel: acpiphp: Slot [3] registered Oct 2 20:03:20.064973 kernel: acpiphp: Slot [4] registered Oct 2 20:03:20.064988 kernel: acpiphp: Slot [5] registered Oct 2 20:03:20.065003 kernel: acpiphp: Slot [6] registered Oct 2 20:03:20.065025 kernel: acpiphp: Slot [7] registered Oct 2 20:03:20.065039 kernel: acpiphp: Slot [8] registered Oct 2 20:03:20.065054 kernel: acpiphp: Slot [9] registered Oct 2 20:03:20.065070 kernel: acpiphp: Slot [10] registered Oct 2 20:03:20.065085 kernel: acpiphp: Slot [11] registered Oct 2 20:03:20.065100 kernel: acpiphp: Slot [12] registered Oct 2 20:03:20.065114 kernel: acpiphp: Slot [13] registered Oct 2 20:03:20.065129 kernel: acpiphp: Slot [14] registered Oct 2 20:03:20.065144 kernel: acpiphp: Slot [15] registered Oct 2 20:03:20.065159 kernel: acpiphp: Slot [16] registered Oct 2 20:03:20.065177 kernel: acpiphp: Slot [17] registered Oct 2 20:03:20.065192 kernel: acpiphp: Slot [18] registered Oct 2 20:03:20.065206 kernel: acpiphp: Slot [19] registered Oct 2 20:03:20.065221 kernel: acpiphp: Slot [20] registered Oct 2 20:03:20.065236 kernel: acpiphp: Slot [21] registered Oct 2 20:03:20.065250 kernel: acpiphp: Slot [22] registered Oct 2 20:03:20.065265 kernel: acpiphp: Slot [23] registered Oct 2 20:03:20.065280 kernel: acpiphp: Slot [24] registered Oct 2 20:03:20.065294 kernel: acpiphp: Slot [25] registered Oct 2 20:03:20.065312 kernel: acpiphp: Slot [26] registered Oct 2 20:03:20.065327 kernel: acpiphp: Slot [27] registered Oct 2 20:03:20.065342 kernel: acpiphp: Slot [28] registered Oct 2 20:03:20.065357 kernel: acpiphp: Slot [29] registered Oct 2 20:03:20.065371 kernel: acpiphp: Slot [30] registered Oct 2 20:03:20.065386 kernel: acpiphp: Slot [31] registered Oct 2 20:03:20.065401 kernel: PCI host bridge to bus 0000:00 Oct 2 20:03:20.065593 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 20:03:20.065771 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 20:03:20.065953 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 20:03:20.066092 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Oct 2 20:03:20.066242 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Oct 2 20:03:20.066379 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 20:03:20.066578 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 20:03:20.070876 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 20:03:20.071067 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Oct 2 20:03:20.071226 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc120-0xc12f] Oct 2 20:03:20.071325 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Oct 2 20:03:20.071417 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Oct 2 20:03:20.071501 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Oct 2 20:03:20.071585 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Oct 2 20:03:20.081943 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Oct 2 20:03:20.082083 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Oct 2 20:03:20.082171 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Oct 2 20:03:20.082270 kernel: pci 0000:00:02.0: [1af4:1050] type 00 class 0x030000 Oct 2 20:03:20.082368 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfe000000-0xfe7fffff pref] Oct 2 20:03:20.082457 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfe800000-0xfe803fff 64bit pref] Oct 2 20:03:20.082541 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfeb90000-0xfeb90fff] Oct 2 20:03:20.082629 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfeb80000-0xfeb8ffff pref] Oct 2 20:03:20.082747 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 20:03:20.082845 kernel: pci 0000:00:03.0: [1af4:1000] type 00 class 0x020000 Oct 2 20:03:20.082932 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc0bf] Oct 2 20:03:20.083018 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfeb91000-0xfeb91fff] Oct 2 20:03:20.083103 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe804000-0xfe807fff 64bit pref] Oct 2 20:03:20.083188 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfeb00000-0xfeb7ffff pref] Oct 2 20:03:20.083288 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Oct 2 20:03:20.083374 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Oct 2 20:03:20.083457 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfeb92000-0xfeb92fff] Oct 2 20:03:20.083540 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe808000-0xfe80bfff 64bit pref] Oct 2 20:03:20.083643 kernel: pci 0000:00:05.0: [1af4:1002] type 00 class 0x00ff00 Oct 2 20:03:20.083749 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0c0-0xc0ff] Oct 2 20:03:20.083835 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe80c000-0xfe80ffff 64bit pref] Oct 2 20:03:20.083931 kernel: pci 0000:00:06.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 20:03:20.084017 kernel: pci 0000:00:06.0: reg 0x10: [io 0xc100-0xc11f] Oct 2 20:03:20.084102 kernel: pci 0000:00:06.0: reg 0x20: [mem 0xfe810000-0xfe813fff 64bit pref] Oct 2 20:03:20.084114 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 20:03:20.084123 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 20:03:20.084131 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 20:03:20.084140 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 20:03:20.084148 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 20:03:20.084159 kernel: iommu: Default domain type: Translated Oct 2 20:03:20.084168 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 20:03:20.084250 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Oct 2 20:03:20.084334 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 20:03:20.084418 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Oct 2 20:03:20.084430 kernel: vgaarb: loaded Oct 2 20:03:20.084438 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 20:03:20.084447 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 20:03:20.084455 kernel: PTP clock support registered Oct 2 20:03:20.084466 kernel: PCI: Using ACPI for IRQ routing Oct 2 20:03:20.084475 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 20:03:20.084483 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 20:03:20.084492 kernel: e820: reserve RAM buffer [mem 0x7ffdd000-0x7fffffff] Oct 2 20:03:20.084500 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 20:03:20.084508 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 20:03:20.084516 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 20:03:20.084525 kernel: pnp: PnP ACPI init Oct 2 20:03:20.084644 kernel: pnp 00:03: [dma 2] Oct 2 20:03:20.084674 kernel: pnp: PnP ACPI: found 5 devices Oct 2 20:03:20.084683 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 20:03:20.084692 kernel: NET: Registered PF_INET protocol family Oct 2 20:03:20.084700 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 20:03:20.084708 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Oct 2 20:03:20.084717 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 20:03:20.084725 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 20:03:20.084733 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Oct 2 20:03:20.084744 kernel: TCP: Hash tables configured (established 16384 bind 16384) Oct 2 20:03:20.084752 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 20:03:20.084760 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 20:03:20.084769 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 20:03:20.084777 kernel: NET: Registered PF_XDP protocol family Oct 2 20:03:20.084860 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 20:03:20.084941 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 20:03:20.085016 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 20:03:20.085088 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Oct 2 20:03:20.085165 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Oct 2 20:03:20.085251 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Oct 2 20:03:20.085338 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 20:03:20.085421 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 20:03:20.085433 kernel: PCI: CLS 0 bytes, default 64 Oct 2 20:03:20.085442 kernel: Initialise system trusted keyrings Oct 2 20:03:20.085450 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Oct 2 20:03:20.085458 kernel: Key type asymmetric registered Oct 2 20:03:20.085469 kernel: Asymmetric key parser 'x509' registered Oct 2 20:03:20.085478 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 20:03:20.085486 kernel: io scheduler mq-deadline registered Oct 2 20:03:20.085494 kernel: io scheduler kyber registered Oct 2 20:03:20.085502 kernel: io scheduler bfq registered Oct 2 20:03:20.085511 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 20:03:20.085520 kernel: ACPI: \_SB_.LNKB: Enabled at IRQ 10 Oct 2 20:03:20.085528 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Oct 2 20:03:20.085537 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Oct 2 20:03:20.085546 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Oct 2 20:03:20.085555 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 20:03:20.085563 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 20:03:20.085571 kernel: random: crng init done Oct 2 20:03:20.085580 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 20:03:20.085588 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 20:03:20.085596 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 20:03:20.091663 kernel: rtc_cmos 00:04: RTC can wake from S4 Oct 2 20:03:20.091697 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 20:03:20.091789 kernel: rtc_cmos 00:04: registered as rtc0 Oct 2 20:03:20.091874 kernel: rtc_cmos 00:04: setting system clock to 2023-10-02T20:03:19 UTC (1696276999) Oct 2 20:03:20.091956 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram Oct 2 20:03:20.091969 kernel: NET: Registered PF_INET6 protocol family Oct 2 20:03:20.091979 kernel: Segment Routing with IPv6 Oct 2 20:03:20.091987 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 20:03:20.091996 kernel: NET: Registered PF_PACKET protocol family Oct 2 20:03:20.092006 kernel: Key type dns_resolver registered Oct 2 20:03:20.092018 kernel: IPI shorthand broadcast: enabled Oct 2 20:03:20.092027 kernel: sched_clock: Marking stable (655705103, 117621522)->(794005196, -20678571) Oct 2 20:03:20.092036 kernel: registered taskstats version 1 Oct 2 20:03:20.092045 kernel: Loading compiled-in X.509 certificates Oct 2 20:03:20.092055 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 20:03:20.092064 kernel: Key type .fscrypt registered Oct 2 20:03:20.092073 kernel: Key type fscrypt-provisioning registered Oct 2 20:03:20.092082 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 20:03:20.092092 kernel: ima: Allocated hash algorithm: sha1 Oct 2 20:03:20.092101 kernel: ima: No architecture policies found Oct 2 20:03:20.092110 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 20:03:20.092119 kernel: Write protecting the kernel read-only data: 28672k Oct 2 20:03:20.092128 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 20:03:20.092137 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 20:03:20.092146 kernel: Run /init as init process Oct 2 20:03:20.092155 kernel: with arguments: Oct 2 20:03:20.092163 kernel: /init Oct 2 20:03:20.092172 kernel: with environment: Oct 2 20:03:20.092182 kernel: HOME=/ Oct 2 20:03:20.092191 kernel: TERM=linux Oct 2 20:03:20.092200 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 20:03:20.092212 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:03:20.092224 systemd[1]: Detected virtualization kvm. Oct 2 20:03:20.092234 systemd[1]: Detected architecture x86-64. Oct 2 20:03:20.092244 systemd[1]: Running in initrd. Oct 2 20:03:20.092255 systemd[1]: No hostname configured, using default hostname. Oct 2 20:03:20.092265 systemd[1]: Hostname set to . Oct 2 20:03:20.092274 systemd[1]: Initializing machine ID from VM UUID. Oct 2 20:03:20.092284 systemd[1]: Queued start job for default target initrd.target. Oct 2 20:03:20.092294 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:03:20.092303 systemd[1]: Reached target cryptsetup.target. Oct 2 20:03:20.092312 systemd[1]: Reached target paths.target. Oct 2 20:03:20.092322 systemd[1]: Reached target slices.target. Oct 2 20:03:20.092333 systemd[1]: Reached target swap.target. Oct 2 20:03:20.092342 systemd[1]: Reached target timers.target. Oct 2 20:03:20.092352 systemd[1]: Listening on iscsid.socket. Oct 2 20:03:20.092362 systemd[1]: Listening on iscsiuio.socket. Oct 2 20:03:20.092371 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 20:03:20.092380 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 20:03:20.092390 systemd[1]: Listening on systemd-journald.socket. Oct 2 20:03:20.092399 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:03:20.092411 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:03:20.092420 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:03:20.092430 systemd[1]: Reached target sockets.target. Oct 2 20:03:20.092439 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:03:20.092458 systemd[1]: Finished network-cleanup.service. Oct 2 20:03:20.092470 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 20:03:20.092481 systemd[1]: Starting systemd-journald.service... Oct 2 20:03:20.092491 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:03:20.092501 systemd[1]: Starting systemd-resolved.service... Oct 2 20:03:20.092510 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 20:03:20.092520 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:03:20.092530 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 20:03:20.092540 kernel: audit: type=1130 audit(1696277000.087:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.092550 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:03:20.092565 systemd-journald[185]: Journal started Oct 2 20:03:20.092620 systemd-journald[185]: Runtime Journal (/run/log/journal/e6d43cbf4e594510ae2a453c977e53e5) is 4.9M, max 39.5M, 34.5M free. Oct 2 20:03:20.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.048682 systemd-modules-load[186]: Inserted module 'overlay' Oct 2 20:03:20.104246 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 20:03:20.104273 kernel: Bridge firewalling registered Oct 2 20:03:20.104230 systemd-modules-load[186]: Inserted module 'br_netfilter' Oct 2 20:03:20.108739 systemd[1]: Started systemd-journald.service. Oct 2 20:03:20.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.111149 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 20:03:20.118807 kernel: audit: type=1130 audit(1696277000.110:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.118830 kernel: audit: type=1130 audit(1696277000.114:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.114886 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:03:20.121482 systemd-resolved[187]: Positive Trust Anchors: Oct 2 20:03:20.127611 kernel: audit: type=1130 audit(1696277000.121:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.121492 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:03:20.131215 kernel: SCSI subsystem initialized Oct 2 20:03:20.121529 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:03:20.153984 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 20:03:20.154010 kernel: device-mapper: uevent: version 1.0.3 Oct 2 20:03:20.154021 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 20:03:20.122985 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 20:03:20.134485 systemd-resolved[187]: Defaulting to hostname 'linux'. Oct 2 20:03:20.135885 systemd[1]: Started systemd-resolved.service. Oct 2 20:03:20.159275 kernel: audit: type=1130 audit(1696277000.154:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.153508 systemd-modules-load[186]: Inserted module 'dm_multipath' Oct 2 20:03:20.163951 kernel: audit: type=1130 audit(1696277000.159:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.155260 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:03:20.168322 kernel: audit: type=1130 audit(1696277000.163:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.163000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.159995 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 20:03:20.164559 systemd[1]: Reached target nss-lookup.target. Oct 2 20:03:20.169965 systemd[1]: Starting dracut-cmdline.service... Oct 2 20:03:20.171739 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:03:20.180954 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:03:20.185340 kernel: audit: type=1130 audit(1696277000.180:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.185394 dracut-cmdline[206]: dracut-dracut-053 Oct 2 20:03:20.187194 dracut-cmdline[206]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:03:20.254707 kernel: Loading iSCSI transport class v2.0-870. Oct 2 20:03:20.267703 kernel: iscsi: registered transport (tcp) Oct 2 20:03:20.292310 kernel: iscsi: registered transport (qla4xxx) Oct 2 20:03:20.292365 kernel: QLogic iSCSI HBA Driver Oct 2 20:03:20.345744 systemd[1]: Finished dracut-cmdline.service. Oct 2 20:03:20.347454 systemd[1]: Starting dracut-pre-udev.service... Oct 2 20:03:20.356252 kernel: audit: type=1130 audit(1696277000.345:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.345000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.427738 kernel: raid6: sse2x4 gen() 5279 MB/s Oct 2 20:03:20.444721 kernel: raid6: sse2x4 xor() 4802 MB/s Oct 2 20:03:20.461736 kernel: raid6: sse2x2 gen() 14403 MB/s Oct 2 20:03:20.478733 kernel: raid6: sse2x2 xor() 8757 MB/s Oct 2 20:03:20.495734 kernel: raid6: sse2x1 gen() 10857 MB/s Oct 2 20:03:20.513450 kernel: raid6: sse2x1 xor() 7020 MB/s Oct 2 20:03:20.513512 kernel: raid6: using algorithm sse2x2 gen() 14403 MB/s Oct 2 20:03:20.513540 kernel: raid6: .... xor() 8757 MB/s, rmw enabled Oct 2 20:03:20.514296 kernel: raid6: using ssse3x2 recovery algorithm Oct 2 20:03:20.528729 kernel: xor: measuring software checksum speed Oct 2 20:03:20.529729 kernel: prefetch64-sse : 18256 MB/sec Oct 2 20:03:20.535703 kernel: generic_sse : 16101 MB/sec Oct 2 20:03:20.535754 kernel: xor: using function: prefetch64-sse (18256 MB/sec) Oct 2 20:03:20.647772 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 20:03:20.662368 systemd[1]: Finished dracut-pre-udev.service. Oct 2 20:03:20.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.662000 audit: BPF prog-id=7 op=LOAD Oct 2 20:03:20.663000 audit: BPF prog-id=8 op=LOAD Oct 2 20:03:20.664406 systemd[1]: Starting systemd-udevd.service... Oct 2 20:03:20.694118 systemd-udevd[386]: Using default interface naming scheme 'v252'. Oct 2 20:03:20.704317 systemd[1]: Started systemd-udevd.service. Oct 2 20:03:20.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.708954 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 20:03:20.731071 dracut-pre-trigger[394]: rd.md=0: removing MD RAID activation Oct 2 20:03:20.793569 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 20:03:20.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.797043 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:03:20.862238 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:03:20.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:20.935692 kernel: virtio_blk virtio2: [vda] 41943040 512-byte logical blocks (21.5 GB/20.0 GiB) Oct 2 20:03:20.945405 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 20:03:20.945458 kernel: GPT:17805311 != 41943039 Oct 2 20:03:20.945470 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 20:03:20.945481 kernel: GPT:17805311 != 41943039 Oct 2 20:03:20.946131 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 20:03:20.948387 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 20:03:20.960688 kernel: libata version 3.00 loaded. Oct 2 20:03:20.964680 kernel: ata_piix 0000:00:01.1: version 2.13 Oct 2 20:03:20.966720 kernel: scsi host0: ata_piix Oct 2 20:03:20.966891 kernel: scsi host1: ata_piix Oct 2 20:03:20.967003 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc120 irq 14 Oct 2 20:03:20.967016 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc128 irq 15 Oct 2 20:03:20.994682 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (433) Oct 2 20:03:21.005845 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 20:03:21.041136 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 20:03:21.045042 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 20:03:21.046267 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 20:03:21.050246 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:03:21.051704 systemd[1]: Starting disk-uuid.service... Oct 2 20:03:21.062889 disk-uuid[451]: Primary Header is updated. Oct 2 20:03:21.062889 disk-uuid[451]: Secondary Entries is updated. Oct 2 20:03:21.062889 disk-uuid[451]: Secondary Header is updated. Oct 2 20:03:21.069685 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 20:03:21.075677 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 20:03:22.092343 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 20:03:22.093509 disk-uuid[452]: The operation has completed successfully. Oct 2 20:03:22.160817 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 20:03:22.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:22.161000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:22.161027 systemd[1]: Finished disk-uuid.service. Oct 2 20:03:22.182356 systemd[1]: Starting verity-setup.service... Oct 2 20:03:22.200816 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 20:03:22.319266 systemd[1]: Found device dev-mapper-usr.device. Oct 2 20:03:22.323770 systemd[1]: Mounting sysusr-usr.mount... Oct 2 20:03:22.330080 systemd[1]: Finished verity-setup.service. Oct 2 20:03:22.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:22.472722 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 20:03:22.472839 systemd[1]: Mounted sysusr-usr.mount. Oct 2 20:03:22.473429 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 20:03:22.474234 systemd[1]: Starting ignition-setup.service... Oct 2 20:03:22.475411 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 20:03:22.491895 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:03:22.491934 kernel: BTRFS info (device vda6): using free space tree Oct 2 20:03:22.491947 kernel: BTRFS info (device vda6): has skinny extents Oct 2 20:03:22.522121 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 20:03:22.549743 systemd[1]: Finished ignition-setup.service. Oct 2 20:03:22.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:22.551169 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 20:03:22.608049 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 20:03:22.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:22.609000 audit: BPF prog-id=9 op=LOAD Oct 2 20:03:22.610435 systemd[1]: Starting systemd-networkd.service... Oct 2 20:03:22.640288 systemd-networkd[622]: lo: Link UP Oct 2 20:03:22.640302 systemd-networkd[622]: lo: Gained carrier Oct 2 20:03:22.641265 systemd-networkd[622]: Enumeration completed Oct 2 20:03:22.641000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:22.641356 systemd[1]: Started systemd-networkd.service. Oct 2 20:03:22.642438 systemd[1]: Reached target network.target. Oct 2 20:03:22.644060 systemd[1]: Starting iscsiuio.service... Oct 2 20:03:22.645182 systemd-networkd[622]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:03:22.647885 systemd-networkd[622]: eth0: Link UP Oct 2 20:03:22.647890 systemd-networkd[622]: eth0: Gained carrier Oct 2 20:03:22.653346 systemd[1]: Started iscsiuio.service. Oct 2 20:03:22.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:22.655582 systemd[1]: Starting iscsid.service... Oct 2 20:03:22.659432 iscsid[627]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:03:22.659432 iscsid[627]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 20:03:22.659432 iscsid[627]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 20:03:22.659432 iscsid[627]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 20:03:22.659432 iscsid[627]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:03:22.659432 iscsid[627]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 20:03:22.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:22.661066 systemd[1]: Started iscsid.service. Oct 2 20:03:22.662776 systemd[1]: Starting dracut-initqueue.service... Oct 2 20:03:22.670509 systemd-networkd[622]: eth0: DHCPv4 address 172.24.4.251/24, gateway 172.24.4.1 acquired from 172.24.4.1 Oct 2 20:03:22.676643 systemd[1]: Finished dracut-initqueue.service. Oct 2 20:03:22.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:22.677732 systemd[1]: Reached target remote-fs-pre.target. Oct 2 20:03:22.678327 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:03:22.679750 systemd[1]: Reached target remote-fs.target. Oct 2 20:03:22.681588 systemd[1]: Starting dracut-pre-mount.service... Oct 2 20:03:22.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:22.692355 systemd[1]: Finished dracut-pre-mount.service. Oct 2 20:03:22.940794 systemd-resolved[187]: Detected conflict on linux IN A 172.24.4.251 Oct 2 20:03:22.940808 systemd-resolved[187]: Hostname conflict, changing published hostname from 'linux' to 'linux3'. Oct 2 20:03:22.966567 ignition[582]: Ignition 2.14.0 Oct 2 20:03:22.967313 ignition[582]: Stage: fetch-offline Oct 2 20:03:22.967394 ignition[582]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:03:22.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:22.970072 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 20:03:22.967419 ignition[582]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 20:03:22.971591 systemd[1]: Starting ignition-fetch.service... Oct 2 20:03:22.968793 ignition[582]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 20:03:22.968889 ignition[582]: parsed url from cmdline: "" Oct 2 20:03:22.968894 ignition[582]: no config URL provided Oct 2 20:03:22.968899 ignition[582]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:03:22.968908 ignition[582]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:03:22.968913 ignition[582]: failed to fetch config: resource requires networking Oct 2 20:03:22.969013 ignition[582]: Ignition finished successfully Oct 2 20:03:22.979763 ignition[645]: Ignition 2.14.0 Oct 2 20:03:22.979771 ignition[645]: Stage: fetch Oct 2 20:03:22.979891 ignition[645]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:03:22.979913 ignition[645]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 20:03:22.980912 ignition[645]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 20:03:22.981042 ignition[645]: parsed url from cmdline: "" Oct 2 20:03:22.981047 ignition[645]: no config URL provided Oct 2 20:03:22.981053 ignition[645]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:03:22.981063 ignition[645]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:03:22.984750 ignition[645]: GET http://169.254.169.254/openstack/latest/user_data: attempt #1 Oct 2 20:03:22.989131 ignition[645]: config drive ("/dev/disk/by-label/config-2") not found. Waiting... Oct 2 20:03:22.989232 ignition[645]: config drive ("/dev/disk/by-label/CONFIG-2") not found. Waiting... Oct 2 20:03:23.354538 ignition[645]: GET result: OK Oct 2 20:03:23.354782 ignition[645]: parsing config with SHA512: e3c1b44a2aa8f7070aefd2af5d9ddb706fec7ceeb7d2201c0d117469c77ff298c77df8d20acdc94cac12675a5f751df46bc65cb62550525965061aefda47201e Oct 2 20:03:23.433535 unknown[645]: fetched base config from "system" Oct 2 20:03:23.435107 unknown[645]: fetched base config from "system" Oct 2 20:03:23.436420 unknown[645]: fetched user config from "openstack" Oct 2 20:03:23.439078 ignition[645]: fetch: fetch complete Oct 2 20:03:23.439258 ignition[645]: fetch: fetch passed Oct 2 20:03:23.439406 ignition[645]: Ignition finished successfully Oct 2 20:03:23.442433 systemd[1]: Finished ignition-fetch.service. Oct 2 20:03:23.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:23.455186 systemd[1]: Starting ignition-kargs.service... Oct 2 20:03:23.470260 ignition[651]: Ignition 2.14.0 Oct 2 20:03:23.470277 ignition[651]: Stage: kargs Oct 2 20:03:23.470380 ignition[651]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:03:23.474926 systemd[1]: Finished ignition-kargs.service. Oct 2 20:03:23.470401 ignition[651]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 20:03:23.477054 systemd[1]: Starting ignition-disks.service... Oct 2 20:03:23.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:23.471227 ignition[651]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 20:03:23.472439 ignition[651]: kargs: kargs passed Oct 2 20:03:23.472477 ignition[651]: Ignition finished successfully Oct 2 20:03:23.486025 ignition[656]: Ignition 2.14.0 Oct 2 20:03:23.486039 ignition[656]: Stage: disks Oct 2 20:03:23.486153 ignition[656]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:03:23.489685 systemd[1]: Finished ignition-disks.service. Oct 2 20:03:23.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:23.486179 ignition[656]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 20:03:23.491786 systemd[1]: Reached target initrd-root-device.target. Oct 2 20:03:23.487079 ignition[656]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 20:03:23.493253 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:03:23.488379 ignition[656]: disks: disks passed Oct 2 20:03:23.494772 systemd[1]: Reached target local-fs.target. Oct 2 20:03:23.488442 ignition[656]: Ignition finished successfully Oct 2 20:03:23.496683 systemd[1]: Reached target sysinit.target. Oct 2 20:03:23.498192 systemd[1]: Reached target basic.target. Oct 2 20:03:23.500437 systemd[1]: Starting systemd-fsck-root.service... Oct 2 20:03:23.523241 systemd-fsck[663]: ROOT: clean, 603/1628000 files, 124049/1617920 blocks Oct 2 20:03:23.537025 systemd[1]: Finished systemd-fsck-root.service. Oct 2 20:03:23.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:23.541032 systemd[1]: Mounting sysroot.mount... Oct 2 20:03:23.562749 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 20:03:23.564398 systemd[1]: Mounted sysroot.mount. Oct 2 20:03:23.567457 systemd[1]: Reached target initrd-root-fs.target. Oct 2 20:03:23.573590 systemd[1]: Mounting sysroot-usr.mount... Oct 2 20:03:23.577217 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 20:03:23.580501 systemd[1]: Starting flatcar-openstack-hostname.service... Oct 2 20:03:23.581795 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 20:03:23.581868 systemd[1]: Reached target ignition-diskful.target. Oct 2 20:03:23.585364 systemd[1]: Mounted sysroot-usr.mount. Oct 2 20:03:23.591839 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:03:23.597594 systemd[1]: Starting initrd-setup-root.service... Oct 2 20:03:23.615295 initrd-setup-root[675]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 20:03:23.624701 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/vda6 scanned by mount (670) Oct 2 20:03:23.637052 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:03:23.637112 kernel: BTRFS info (device vda6): using free space tree Oct 2 20:03:23.637124 kernel: BTRFS info (device vda6): has skinny extents Oct 2 20:03:23.637812 initrd-setup-root[683]: cut: /sysroot/etc/group: No such file or directory Oct 2 20:03:23.646707 initrd-setup-root[707]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 20:03:23.653583 initrd-setup-root[717]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 20:03:23.660330 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:03:23.762154 systemd[1]: Finished initrd-setup-root.service. Oct 2 20:03:23.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:23.765174 systemd[1]: Starting ignition-mount.service... Oct 2 20:03:23.771325 systemd[1]: Starting sysroot-boot.service... Oct 2 20:03:23.781097 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 20:03:23.781347 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 20:03:23.815503 ignition[738]: INFO : Ignition 2.14.0 Oct 2 20:03:23.815503 ignition[738]: INFO : Stage: mount Oct 2 20:03:23.818069 ignition[738]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:03:23.818069 ignition[738]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 20:03:23.818069 ignition[738]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 20:03:23.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:23.824420 ignition[738]: INFO : mount: mount passed Oct 2 20:03:23.824420 ignition[738]: INFO : Ignition finished successfully Oct 2 20:03:23.820325 systemd[1]: Finished ignition-mount.service. Oct 2 20:03:23.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:23.829449 systemd[1]: Finished sysroot-boot.service. Oct 2 20:03:23.857900 coreos-metadata[669]: Oct 02 20:03:23.857 INFO Fetching http://169.254.169.254/latest/meta-data/hostname: Attempt #1 Oct 2 20:03:23.880546 coreos-metadata[669]: Oct 02 20:03:23.880 INFO Fetch successful Oct 2 20:03:23.880546 coreos-metadata[669]: Oct 02 20:03:23.880 INFO wrote hostname ci-3510-3-0-e-e383a0c9b4.novalocal to /sysroot/etc/hostname Oct 2 20:03:23.885819 systemd[1]: flatcar-openstack-hostname.service: Deactivated successfully. Oct 2 20:03:23.886089 systemd[1]: Finished flatcar-openstack-hostname.service. Oct 2 20:03:23.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:23.887000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:23.889773 systemd[1]: Starting ignition-files.service... Oct 2 20:03:23.901102 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:03:23.913710 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/vda6 scanned by mount (746) Oct 2 20:03:23.921692 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:03:23.921772 kernel: BTRFS info (device vda6): using free space tree Oct 2 20:03:23.921793 kernel: BTRFS info (device vda6): has skinny extents Oct 2 20:03:23.935465 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:03:23.959893 ignition[765]: INFO : Ignition 2.14.0 Oct 2 20:03:23.959893 ignition[765]: INFO : Stage: files Oct 2 20:03:23.962613 ignition[765]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:03:23.962613 ignition[765]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 20:03:23.962613 ignition[765]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 20:03:23.968754 ignition[765]: DEBUG : files: compiled without relabeling support, skipping Oct 2 20:03:23.968754 ignition[765]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 20:03:23.968754 ignition[765]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 20:03:23.975407 ignition[765]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 20:03:23.977502 ignition[765]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 20:03:23.980912 unknown[765]: wrote ssh authorized keys file for user: core Oct 2 20:03:23.982683 ignition[765]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 20:03:23.987581 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 20:03:23.989978 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 20:03:24.443545 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 20:03:24.554923 systemd-networkd[622]: eth0: Gained IPv6LL Oct 2 20:03:25.236588 ignition[765]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 20:03:25.238166 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 20:03:25.238166 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 20:03:25.238166 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 20:03:25.626129 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 20:03:26.047695 ignition[765]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 20:03:26.051351 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 20:03:26.051351 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:03:26.051351 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubeadm: attempt #1 Oct 2 20:03:26.194438 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 20:03:27.783076 ignition[765]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: f40216b7d14046931c58072d10c7122934eac5a23c08821371f8b08ac1779443ad11d3458a4c5dcde7cf80fc600a9fefb14b1942aa46a52330248d497ca88836 Oct 2 20:03:27.784726 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:03:27.784726 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:03:27.784726 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubelet: attempt #1 Oct 2 20:03:27.899918 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 20:03:30.442918 ignition[765]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: a283da2224d456958b2cb99b4f6faf4457c4ed89e9e95f37d970c637f6a7f64ff4dd4d2bfce538759b2d2090933bece599a285ef8fd132eb383fece9a3941560 Oct 2 20:03:30.446739 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:03:30.446739 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:03:30.446739 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubectl: attempt #1 Oct 2 20:03:30.699117 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 20:03:32.374811 ignition[765]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 857e67001e74840518413593d90c6e64ad3f00d55fa44ad9a8e2ed6135392c908caff7ec19af18cbe10784b8f83afe687a0bc3bacbc9eee984cdeb9c0749cb83 Oct 2 20:03:32.380635 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:03:32.380635 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:03:32.380635 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:03:32.380635 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:03:32.380635 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 20:03:32.745169 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 20:03:33.664520 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:03:33.667548 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 20:03:33.667548 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 20:03:33.667548 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:03:33.667548 ignition[765]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:03:33.667548 ignition[765]: INFO : files: op(c): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 20:03:33.793350 ignition[765]: INFO : files: op(c): op(d): [started] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata-sshkeys@.service.d/20-clct-provider-override.conf" Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(c): op(d): [finished] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata-sshkeys@.service.d/20-clct-provider-override.conf" Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(c): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(e): [started] processing unit "coreos-metadata.service" Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(e): op(f): [started] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata.service.d/20-clct-provider-override.conf" Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(e): op(f): [finished] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata.service.d/20-clct-provider-override.conf" Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(e): [finished] processing unit "coreos-metadata.service" Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(10): [started] processing unit "prepare-cni-plugins.service" Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(10): op(11): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(10): op(11): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(10): [finished] processing unit "prepare-cni-plugins.service" Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(12): [started] processing unit "prepare-critools.service" Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(12): op(13): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(12): op(13): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(12): [finished] processing unit "prepare-critools.service" Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(14): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(14): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 20:03:33.796377 ignition[765]: INFO : files: op(15): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:03:33.855136 kernel: kauditd_printk_skb: 27 callbacks suppressed Oct 2 20:03:33.855190 kernel: audit: type=1130 audit(1696277013.824:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:33.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:33.855366 ignition[765]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:03:33.855366 ignition[765]: INFO : files: op(16): [started] setting preset to enabled for "prepare-critools.service" Oct 2 20:03:33.855366 ignition[765]: INFO : files: op(16): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 20:03:33.855366 ignition[765]: INFO : files: createResultFile: createFiles: op(17): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:03:33.855366 ignition[765]: INFO : files: createResultFile: createFiles: op(17): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:03:33.855366 ignition[765]: INFO : files: files passed Oct 2 20:03:33.855366 ignition[765]: INFO : Ignition finished successfully Oct 2 20:03:33.818554 systemd[1]: Finished ignition-files.service. Oct 2 20:03:33.827044 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 20:03:33.838782 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 20:03:33.840390 systemd[1]: Starting ignition-quench.service... Oct 2 20:03:33.972510 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 20:03:33.972775 systemd[1]: Finished ignition-quench.service. Oct 2 20:03:33.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:33.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:33.992407 kernel: audit: type=1130 audit(1696277013.975:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:33.992475 kernel: audit: type=1131 audit(1696277013.976:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.012395 initrd-setup-root-after-ignition[790]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 20:03:34.013555 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 20:03:34.025962 kernel: audit: type=1130 audit(1696277014.015:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.016002 systemd[1]: Reached target ignition-complete.target. Oct 2 20:03:34.028760 systemd[1]: Starting initrd-parse-etc.service... Oct 2 20:03:34.065168 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 20:03:34.065395 systemd[1]: Finished initrd-parse-etc.service. Oct 2 20:03:34.084589 kernel: audit: type=1130 audit(1696277014.067:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.084692 kernel: audit: type=1131 audit(1696277014.067:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.067000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.068076 systemd[1]: Reached target initrd-fs.target. Oct 2 20:03:34.085706 systemd[1]: Reached target initrd.target. Oct 2 20:03:34.087872 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 20:03:34.089530 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 20:03:34.117391 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 20:03:34.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.120395 systemd[1]: Starting initrd-cleanup.service... Oct 2 20:03:34.130424 kernel: audit: type=1130 audit(1696277014.117:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.143229 systemd[1]: Stopped target nss-lookup.target. Oct 2 20:03:34.144493 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 20:03:34.155116 systemd[1]: Stopped target timers.target. Oct 2 20:03:34.157274 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 20:03:34.168978 kernel: audit: type=1131 audit(1696277014.158:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.158000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.157506 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 20:03:34.159632 systemd[1]: Stopped target initrd.target. Oct 2 20:03:34.170239 systemd[1]: Stopped target basic.target. Oct 2 20:03:34.172396 systemd[1]: Stopped target ignition-complete.target. Oct 2 20:03:34.174701 systemd[1]: Stopped target ignition-diskful.target. Oct 2 20:03:34.176867 systemd[1]: Stopped target initrd-root-device.target. Oct 2 20:03:34.179362 systemd[1]: Stopped target remote-fs.target. Oct 2 20:03:34.181568 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 20:03:34.183902 systemd[1]: Stopped target sysinit.target. Oct 2 20:03:34.186090 systemd[1]: Stopped target local-fs.target. Oct 2 20:03:34.188286 systemd[1]: Stopped target local-fs-pre.target. Oct 2 20:03:34.190717 systemd[1]: Stopped target swap.target. Oct 2 20:03:34.204284 kernel: audit: type=1131 audit(1696277014.194:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.194000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.192705 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 20:03:34.193121 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 20:03:34.195262 systemd[1]: Stopped target cryptsetup.target. Oct 2 20:03:34.218624 kernel: audit: type=1131 audit(1696277014.208:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.207204 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 20:03:34.219000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.207575 systemd[1]: Stopped dracut-initqueue.service. Oct 2 20:03:34.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.209573 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 20:03:34.210011 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 20:03:34.220182 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 20:03:34.220528 systemd[1]: Stopped ignition-files.service. Oct 2 20:03:34.224377 systemd[1]: Stopping ignition-mount.service... Oct 2 20:03:34.233594 iscsid[627]: iscsid shutting down. Oct 2 20:03:34.236038 systemd[1]: Stopping iscsid.service... Oct 2 20:03:34.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.239006 systemd[1]: Stopping sysroot-boot.service... Oct 2 20:03:34.240226 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 20:03:34.247000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.240626 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 20:03:34.244777 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 20:03:34.245072 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 20:03:34.252433 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 20:03:34.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.253597 systemd[1]: Stopped iscsid.service. Oct 2 20:03:34.256066 systemd[1]: Stopping iscsiuio.service... Oct 2 20:03:34.257155 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 20:03:34.257827 systemd[1]: Finished initrd-cleanup.service. Oct 2 20:03:34.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.259976 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 20:03:34.260589 systemd[1]: Stopped iscsiuio.service. Oct 2 20:03:34.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.274317 ignition[803]: INFO : Ignition 2.14.0 Oct 2 20:03:34.274317 ignition[803]: INFO : Stage: umount Oct 2 20:03:34.274317 ignition[803]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:03:34.274317 ignition[803]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 20:03:34.274317 ignition[803]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 20:03:34.274317 ignition[803]: INFO : umount: umount passed Oct 2 20:03:34.274317 ignition[803]: INFO : Ignition finished successfully Oct 2 20:03:34.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.279000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.279000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.280000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.281000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.278596 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 20:03:34.278725 systemd[1]: Stopped ignition-mount.service. Oct 2 20:03:34.279329 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 20:03:34.279368 systemd[1]: Stopped ignition-disks.service. Oct 2 20:03:34.279847 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 20:03:34.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.279884 systemd[1]: Stopped ignition-kargs.service. Oct 2 20:03:34.280346 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 20:03:34.280468 systemd[1]: Stopped ignition-fetch.service. Oct 2 20:03:34.281253 systemd[1]: Stopped target network.target. Oct 2 20:03:34.281781 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 20:03:34.281821 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 20:03:34.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.282332 systemd[1]: Stopped target paths.target. Oct 2 20:03:34.282809 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 20:03:34.283309 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 20:03:34.284494 systemd[1]: Stopped target slices.target. Oct 2 20:03:34.284928 systemd[1]: Stopped target sockets.target. Oct 2 20:03:34.297000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.285911 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 20:03:34.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.285944 systemd[1]: Closed iscsid.socket. Oct 2 20:03:34.287008 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 20:03:34.301000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.287043 systemd[1]: Closed iscsiuio.socket. Oct 2 20:03:34.303000 audit: BPF prog-id=6 op=UNLOAD Oct 2 20:03:34.287802 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 20:03:34.287870 systemd[1]: Stopped ignition-setup.service. Oct 2 20:03:34.288567 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:03:34.289774 systemd[1]: Stopping systemd-resolved.service... Oct 2 20:03:34.291896 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 20:03:34.292400 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 20:03:34.308000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.292500 systemd[1]: Stopped sysroot-boot.service. Oct 2 20:03:34.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.293538 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 20:03:34.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.293578 systemd[1]: Stopped initrd-setup-root.service. Oct 2 20:03:34.293733 systemd-networkd[622]: eth0: DHCPv6 lease lost Oct 2 20:03:34.312000 audit: BPF prog-id=9 op=UNLOAD Oct 2 20:03:34.298689 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 20:03:34.298838 systemd[1]: Stopped systemd-resolved.service. Oct 2 20:03:34.301374 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:03:34.301527 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:03:34.303776 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 20:03:34.317000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.303820 systemd[1]: Closed systemd-networkd.socket. Oct 2 20:03:34.305368 systemd[1]: Stopping network-cleanup.service... Oct 2 20:03:34.319000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.308092 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 20:03:34.308201 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 20:03:34.309070 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 20:03:34.322000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.309156 systemd[1]: Stopped systemd-sysctl.service. Oct 2 20:03:34.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.310311 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 20:03:34.324000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.310361 systemd[1]: Stopped systemd-modules-load.service. Oct 2 20:03:34.311225 systemd[1]: Stopping systemd-udevd.service... Oct 2 20:03:34.313415 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 20:03:34.334000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.316905 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 20:03:34.335000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.317110 systemd[1]: Stopped systemd-udevd.service. Oct 2 20:03:34.336000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.319292 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 20:03:34.319405 systemd[1]: Stopped network-cleanup.service. Oct 2 20:03:34.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:34.320333 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 20:03:34.320389 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 20:03:34.321160 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 20:03:34.321201 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 20:03:34.322278 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 20:03:34.322341 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 20:03:34.323408 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 20:03:34.323446 systemd[1]: Stopped dracut-cmdline.service. Oct 2 20:03:34.324381 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 20:03:34.324420 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 20:03:34.326202 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 20:03:34.334156 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 20:03:34.334239 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 20:03:34.335843 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 20:03:34.335885 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 20:03:34.336483 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 20:03:34.336533 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 20:03:34.338576 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 20:03:34.339120 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 20:03:34.339233 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 20:03:34.342798 systemd[1]: Reached target initrd-switch-root.target. Oct 2 20:03:34.344271 systemd[1]: Starting initrd-switch-root.service... Oct 2 20:03:34.362328 systemd[1]: Switching root. Oct 2 20:03:34.382627 systemd-journald[185]: Journal stopped Oct 2 20:03:38.605790 systemd-journald[185]: Received SIGTERM from PID 1 (systemd). Oct 2 20:03:38.605876 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 20:03:38.605892 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 20:03:38.605906 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 20:03:38.605924 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 20:03:38.605936 kernel: SELinux: policy capability open_perms=1 Oct 2 20:03:38.605948 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 20:03:38.605960 kernel: SELinux: policy capability always_check_network=0 Oct 2 20:03:38.605971 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 20:03:38.605983 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 20:03:38.605995 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 20:03:38.606010 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 20:03:38.606022 systemd[1]: Successfully loaded SELinux policy in 95.441ms. Oct 2 20:03:38.606038 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 22.377ms. Oct 2 20:03:38.606052 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:03:38.606065 systemd[1]: Detected virtualization kvm. Oct 2 20:03:38.606078 systemd[1]: Detected architecture x86-64. Oct 2 20:03:38.606092 systemd[1]: Detected first boot. Oct 2 20:03:38.606104 systemd[1]: Hostname set to . Oct 2 20:03:38.606119 systemd[1]: Initializing machine ID from VM UUID. Oct 2 20:03:38.606132 systemd[1]: Populated /etc with preset unit settings. Oct 2 20:03:38.606145 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:03:38.606162 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:03:38.606176 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:03:38.606194 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 20:03:38.606210 systemd[1]: Stopped initrd-switch-root.service. Oct 2 20:03:38.606222 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 20:03:38.606235 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 20:03:38.606247 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 20:03:38.606260 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 20:03:38.606272 systemd[1]: Created slice system-getty.slice. Oct 2 20:03:38.606285 systemd[1]: Created slice system-modprobe.slice. Oct 2 20:03:38.606297 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 20:03:38.606310 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 20:03:38.606324 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 20:03:38.606337 systemd[1]: Created slice user.slice. Oct 2 20:03:38.606349 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:03:38.606362 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 20:03:38.606375 systemd[1]: Set up automount boot.automount. Oct 2 20:03:38.606388 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 20:03:38.606401 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 20:03:38.606417 systemd[1]: Stopped target initrd-fs.target. Oct 2 20:03:38.606430 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 20:03:38.606442 systemd[1]: Reached target integritysetup.target. Oct 2 20:03:38.606454 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:03:38.606466 systemd[1]: Reached target remote-fs.target. Oct 2 20:03:38.606479 systemd[1]: Reached target slices.target. Oct 2 20:03:38.606492 systemd[1]: Reached target swap.target. Oct 2 20:03:38.606504 systemd[1]: Reached target torcx.target. Oct 2 20:03:38.606519 systemd[1]: Reached target veritysetup.target. Oct 2 20:03:38.606532 systemd[1]: Listening on systemd-coredump.socket. Oct 2 20:03:38.606544 systemd[1]: Listening on systemd-initctl.socket. Oct 2 20:03:38.606556 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:03:38.606568 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:03:38.606581 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:03:38.606593 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 20:03:38.606606 systemd[1]: Mounting dev-hugepages.mount... Oct 2 20:03:38.606618 systemd[1]: Mounting dev-mqueue.mount... Oct 2 20:03:38.606630 systemd[1]: Mounting media.mount... Oct 2 20:03:38.606694 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:03:38.606714 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 20:03:38.606727 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 20:03:38.606740 systemd[1]: Mounting tmp.mount... Oct 2 20:03:38.606754 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 20:03:38.606767 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 20:03:38.606779 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:03:38.606792 systemd[1]: Starting modprobe@configfs.service... Oct 2 20:03:38.606804 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 20:03:38.606820 systemd[1]: Starting modprobe@drm.service... Oct 2 20:03:38.606832 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 20:03:38.606844 systemd[1]: Starting modprobe@fuse.service... Oct 2 20:03:38.606856 systemd[1]: Starting modprobe@loop.service... Oct 2 20:03:38.606869 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 20:03:38.606882 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 20:03:38.606894 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 20:03:38.606906 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 20:03:38.606918 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 20:03:38.606933 systemd[1]: Stopped systemd-journald.service. Oct 2 20:03:38.606946 kernel: loop: module loaded Oct 2 20:03:38.606958 systemd[1]: Starting systemd-journald.service... Oct 2 20:03:38.606975 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:03:38.606987 systemd[1]: Starting systemd-network-generator.service... Oct 2 20:03:38.606999 systemd[1]: Starting systemd-remount-fs.service... Oct 2 20:03:38.607012 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:03:38.607025 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 20:03:38.607037 systemd[1]: Stopped verity-setup.service. Oct 2 20:03:38.607053 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:03:38.607066 systemd[1]: Mounted dev-hugepages.mount. Oct 2 20:03:38.607080 systemd[1]: Mounted dev-mqueue.mount. Oct 2 20:03:38.607092 systemd[1]: Mounted media.mount. Oct 2 20:03:38.607104 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 20:03:38.607116 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 20:03:38.607129 systemd[1]: Mounted tmp.mount. Oct 2 20:03:38.607141 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 20:03:38.607157 systemd-journald[927]: Journal started Oct 2 20:03:38.607204 systemd-journald[927]: Runtime Journal (/run/log/journal/e6d43cbf4e594510ae2a453c977e53e5) is 4.9M, max 39.5M, 34.5M free. Oct 2 20:03:34.724000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 20:03:34.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:03:34.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:03:34.888000 audit: BPF prog-id=10 op=LOAD Oct 2 20:03:34.888000 audit: BPF prog-id=10 op=UNLOAD Oct 2 20:03:34.888000 audit: BPF prog-id=11 op=LOAD Oct 2 20:03:34.888000 audit: BPF prog-id=11 op=UNLOAD Oct 2 20:03:38.387000 audit: BPF prog-id=12 op=LOAD Oct 2 20:03:38.387000 audit: BPF prog-id=3 op=UNLOAD Oct 2 20:03:38.387000 audit: BPF prog-id=13 op=LOAD Oct 2 20:03:38.387000 audit: BPF prog-id=14 op=LOAD Oct 2 20:03:38.387000 audit: BPF prog-id=4 op=UNLOAD Oct 2 20:03:38.387000 audit: BPF prog-id=5 op=UNLOAD Oct 2 20:03:38.388000 audit: BPF prog-id=15 op=LOAD Oct 2 20:03:38.388000 audit: BPF prog-id=12 op=UNLOAD Oct 2 20:03:38.388000 audit: BPF prog-id=16 op=LOAD Oct 2 20:03:38.388000 audit: BPF prog-id=17 op=LOAD Oct 2 20:03:38.388000 audit: BPF prog-id=13 op=UNLOAD Oct 2 20:03:38.388000 audit: BPF prog-id=14 op=UNLOAD Oct 2 20:03:38.390000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.393000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.401000 audit: BPF prog-id=15 op=UNLOAD Oct 2 20:03:38.537000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.543000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.544000 audit: BPF prog-id=18 op=LOAD Oct 2 20:03:38.545000 audit: BPF prog-id=19 op=LOAD Oct 2 20:03:38.545000 audit: BPF prog-id=20 op=LOAD Oct 2 20:03:38.545000 audit: BPF prog-id=16 op=UNLOAD Oct 2 20:03:38.545000 audit: BPF prog-id=17 op=UNLOAD Oct 2 20:03:38.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.603000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 20:03:38.603000 audit[927]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7ffc47f47f00 a2=4000 a3=7ffc47f47f9c items=0 ppid=1 pid=927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:03:38.603000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 20:03:38.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.385950 systemd[1]: Queued start job for default target multi-user.target. Oct 2 20:03:35.098941 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:35Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:03:38.385965 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 20:03:35.100272 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:35Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:03:38.390376 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 20:03:35.100317 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:35Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:03:38.608712 systemd[1]: Started systemd-journald.service. Oct 2 20:03:35.100421 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:35Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 20:03:35.100447 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:35Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 20:03:35.100512 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:35Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 20:03:35.100543 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:35Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 20:03:38.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:35.101015 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:35Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 20:03:35.101132 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:35Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:03:35.101168 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:35Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:03:35.102632 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:35Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 20:03:35.102755 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:35Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 20:03:35.102804 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:35Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 20:03:38.609679 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:03:35.102843 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:35Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 20:03:35.102887 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:35Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 20:03:35.102923 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:35Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 20:03:37.953600 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:37Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:03:37.954319 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:37Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:03:37.954609 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:37Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:03:37.955128 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:37Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:03:37.955270 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:37Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 20:03:37.955429 /usr/lib/systemd/system-generators/torcx-generator[837]: time="2023-10-02T20:03:37Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 20:03:38.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.612552 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 20:03:38.612700 kernel: fuse: init (API version 7.34) Oct 2 20:03:38.613023 systemd[1]: Finished modprobe@configfs.service. Oct 2 20:03:38.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.613827 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 20:03:38.613978 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 20:03:38.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.613000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.614770 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 20:03:38.614894 systemd[1]: Finished modprobe@drm.service. Oct 2 20:03:38.615586 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 20:03:38.615731 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 20:03:38.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.615000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.616000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.616421 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 20:03:38.616538 systemd[1]: Finished modprobe@fuse.service. Oct 2 20:03:38.617185 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 20:03:38.617361 systemd[1]: Finished modprobe@loop.service. Oct 2 20:03:38.618234 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:03:38.619034 systemd[1]: Finished systemd-network-generator.service. Oct 2 20:03:38.620050 systemd[1]: Finished systemd-remount-fs.service. Oct 2 20:03:38.620995 systemd[1]: Reached target network-pre.target. Oct 2 20:03:38.623432 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 20:03:38.627943 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 20:03:38.630464 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 20:03:38.632428 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 20:03:38.634511 systemd[1]: Starting systemd-journal-flush.service... Oct 2 20:03:38.635518 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 20:03:38.637052 systemd[1]: Starting systemd-random-seed.service... Oct 2 20:03:38.641913 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 20:03:38.643582 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:03:38.645583 systemd[1]: Starting systemd-sysusers.service... Oct 2 20:03:38.648185 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 20:03:38.648849 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 20:03:38.652470 systemd[1]: Finished systemd-random-seed.service. Oct 2 20:03:38.653091 systemd[1]: Reached target first-boot-complete.target. Oct 2 20:03:38.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.655796 systemd-journald[927]: Time spent on flushing to /var/log/journal/e6d43cbf4e594510ae2a453c977e53e5 is 35.517ms for 1120 entries. Oct 2 20:03:38.655796 systemd-journald[927]: System Journal (/var/log/journal/e6d43cbf4e594510ae2a453c977e53e5) is 8.0M, max 584.8M, 576.8M free. Oct 2 20:03:38.721400 systemd-journald[927]: Received client request to flush runtime journal. Oct 2 20:03:38.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.686014 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:03:38.709382 systemd[1]: Finished systemd-sysusers.service. Oct 2 20:03:38.711587 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:03:38.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.723067 systemd[1]: Finished systemd-journal-flush.service. Oct 2 20:03:38.727961 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:03:38.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:38.729759 systemd[1]: Starting systemd-udev-settle.service... Oct 2 20:03:38.738232 udevadm[949]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 20:03:38.760568 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:03:38.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:39.319685 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 20:03:39.332334 kernel: kauditd_printk_skb: 93 callbacks suppressed Oct 2 20:03:39.332442 kernel: audit: type=1130 audit(1696277019.319:139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:39.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:39.334089 kernel: audit: type=1334 audit(1696277019.322:140): prog-id=21 op=LOAD Oct 2 20:03:39.322000 audit: BPF prog-id=21 op=LOAD Oct 2 20:03:39.332966 systemd[1]: Starting systemd-udevd.service... Oct 2 20:03:39.331000 audit: BPF prog-id=22 op=LOAD Oct 2 20:03:39.331000 audit: BPF prog-id=7 op=UNLOAD Oct 2 20:03:39.331000 audit: BPF prog-id=8 op=UNLOAD Oct 2 20:03:39.337082 kernel: audit: type=1334 audit(1696277019.331:141): prog-id=22 op=LOAD Oct 2 20:03:39.337114 kernel: audit: type=1334 audit(1696277019.331:142): prog-id=7 op=UNLOAD Oct 2 20:03:39.337132 kernel: audit: type=1334 audit(1696277019.331:143): prog-id=8 op=UNLOAD Oct 2 20:03:39.379436 systemd-udevd[950]: Using default interface naming scheme 'v252'. Oct 2 20:03:40.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:40.297955 systemd[1]: Started systemd-udevd.service. Oct 2 20:03:40.306811 kernel: audit: type=1130 audit(1696277020.298:144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:40.306000 audit: BPF prog-id=23 op=LOAD Oct 2 20:03:40.310965 systemd[1]: Starting systemd-networkd.service... Oct 2 20:03:40.315481 kernel: audit: type=1334 audit(1696277020.306:145): prog-id=23 op=LOAD Oct 2 20:03:40.337287 kernel: audit: type=1334 audit(1696277020.331:146): prog-id=24 op=LOAD Oct 2 20:03:40.337425 kernel: audit: type=1334 audit(1696277020.334:147): prog-id=25 op=LOAD Oct 2 20:03:40.331000 audit: BPF prog-id=24 op=LOAD Oct 2 20:03:40.334000 audit: BPF prog-id=25 op=LOAD Oct 2 20:03:40.337000 audit: BPF prog-id=26 op=LOAD Oct 2 20:03:40.342330 kernel: audit: type=1334 audit(1696277020.337:148): prog-id=26 op=LOAD Oct 2 20:03:40.340829 systemd[1]: Starting systemd-userdbd.service... Oct 2 20:03:40.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:40.390774 systemd[1]: Started systemd-userdbd.service. Oct 2 20:03:40.422218 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 20:03:40.474795 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 Oct 2 20:03:40.482880 systemd-networkd[955]: lo: Link UP Oct 2 20:03:40.482891 systemd-networkd[955]: lo: Gained carrier Oct 2 20:03:40.485101 systemd-networkd[955]: Enumeration completed Oct 2 20:03:40.485207 systemd[1]: Started systemd-networkd.service. Oct 2 20:03:40.486218 systemd-networkd[955]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:03:40.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:40.489016 kernel: ACPI: button: Power Button [PWRF] Oct 2 20:03:40.488472 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:03:40.490097 systemd-networkd[955]: eth0: Link UP Oct 2 20:03:40.490104 systemd-networkd[955]: eth0: Gained carrier Oct 2 20:03:40.500943 systemd-networkd[955]: eth0: DHCPv4 address 172.24.4.251/24, gateway 172.24.4.1 acquired from 172.24.4.1 Oct 2 20:03:40.496000 audit[959]: AVC avc: denied { confidentiality } for pid=959 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 20:03:40.496000 audit[959]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=558e9852a7f0 a1=32194 a2=7fb359376bc5 a3=5 items=106 ppid=950 pid=959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:03:40.496000 audit: CWD cwd="/" Oct 2 20:03:40.496000 audit: PATH item=0 name=(null) inode=13894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=1 name=(null) inode=13895 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=2 name=(null) inode=13894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=3 name=(null) inode=13896 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=4 name=(null) inode=13894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=5 name=(null) inode=13897 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=6 name=(null) inode=13897 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=7 name=(null) inode=13898 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=8 name=(null) inode=13897 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=9 name=(null) inode=13899 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=10 name=(null) inode=13897 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=11 name=(null) inode=13900 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=12 name=(null) inode=13897 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=13 name=(null) inode=13901 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=14 name=(null) inode=13897 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=15 name=(null) inode=13902 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=16 name=(null) inode=13894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=17 name=(null) inode=13903 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=18 name=(null) inode=13903 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=19 name=(null) inode=13904 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=20 name=(null) inode=13903 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=21 name=(null) inode=13905 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=22 name=(null) inode=13903 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=23 name=(null) inode=13906 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=24 name=(null) inode=13903 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=25 name=(null) inode=13907 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=26 name=(null) inode=13903 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=27 name=(null) inode=13908 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=28 name=(null) inode=13894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=29 name=(null) inode=13909 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=30 name=(null) inode=13909 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=31 name=(null) inode=13910 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=32 name=(null) inode=13909 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=33 name=(null) inode=13911 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=34 name=(null) inode=13909 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=35 name=(null) inode=13912 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=36 name=(null) inode=13909 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=37 name=(null) inode=13913 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=38 name=(null) inode=13909 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=39 name=(null) inode=13914 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=40 name=(null) inode=13894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=41 name=(null) inode=13915 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=42 name=(null) inode=13915 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=43 name=(null) inode=13916 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=44 name=(null) inode=13915 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=45 name=(null) inode=13917 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=46 name=(null) inode=13915 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=47 name=(null) inode=13918 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=48 name=(null) inode=13915 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=49 name=(null) inode=13919 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=50 name=(null) inode=13915 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=51 name=(null) inode=13920 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=52 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=53 name=(null) inode=13921 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=54 name=(null) inode=13921 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=55 name=(null) inode=13922 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=56 name=(null) inode=13921 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=57 name=(null) inode=13923 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=58 name=(null) inode=13921 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=59 name=(null) inode=13924 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=60 name=(null) inode=13924 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=61 name=(null) inode=13925 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=62 name=(null) inode=13924 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=63 name=(null) inode=13926 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=64 name=(null) inode=13924 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=65 name=(null) inode=13927 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=66 name=(null) inode=13924 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=67 name=(null) inode=13928 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=68 name=(null) inode=13924 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=69 name=(null) inode=13929 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=70 name=(null) inode=13921 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=71 name=(null) inode=13930 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=72 name=(null) inode=13930 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=73 name=(null) inode=13931 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=74 name=(null) inode=13930 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=75 name=(null) inode=13932 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=76 name=(null) inode=13930 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=77 name=(null) inode=13933 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=78 name=(null) inode=13930 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=79 name=(null) inode=13934 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=80 name=(null) inode=13930 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=81 name=(null) inode=13935 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=82 name=(null) inode=13921 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=83 name=(null) inode=13936 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=84 name=(null) inode=13936 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=85 name=(null) inode=13937 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=86 name=(null) inode=13936 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=87 name=(null) inode=13938 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=88 name=(null) inode=13936 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=89 name=(null) inode=13939 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=90 name=(null) inode=13936 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=91 name=(null) inode=13940 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=92 name=(null) inode=13936 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=93 name=(null) inode=13941 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=94 name=(null) inode=13921 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=95 name=(null) inode=13942 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=96 name=(null) inode=13942 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=97 name=(null) inode=13943 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=98 name=(null) inode=13942 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=99 name=(null) inode=13944 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=100 name=(null) inode=13942 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=101 name=(null) inode=13945 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=102 name=(null) inode=13942 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=103 name=(null) inode=13946 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=104 name=(null) inode=13942 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PATH item=105 name=(null) inode=13947 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:03:40.496000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 20:03:40.581773 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Oct 2 20:03:40.588673 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input4 Oct 2 20:03:40.591712 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 20:03:40.638119 systemd[1]: Finished systemd-udev-settle.service. Oct 2 20:03:40.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:40.639999 systemd[1]: Starting lvm2-activation-early.service... Oct 2 20:03:40.677952 lvm[980]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:03:40.719835 systemd[1]: Finished lvm2-activation-early.service. Oct 2 20:03:40.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:40.721346 systemd[1]: Reached target cryptsetup.target. Oct 2 20:03:40.725064 systemd[1]: Starting lvm2-activation.service... Oct 2 20:03:40.734822 lvm[981]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:03:40.801748 systemd[1]: Finished lvm2-activation.service. Oct 2 20:03:40.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:40.803118 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:03:40.804282 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 20:03:40.804348 systemd[1]: Reached target local-fs.target. Oct 2 20:03:40.805446 systemd[1]: Reached target machines.target. Oct 2 20:03:40.809308 systemd[1]: Starting ldconfig.service... Oct 2 20:03:40.848326 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 20:03:40.848464 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:03:40.852080 systemd[1]: Starting systemd-boot-update.service... Oct 2 20:03:40.856723 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 20:03:40.860723 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 20:03:40.862166 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:03:40.862278 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:03:40.864701 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 20:03:40.920037 systemd-tmpfiles[986]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 20:03:40.926551 systemd[1]: boot.automount: Got automount request for /boot, triggered by 983 (bootctl) Oct 2 20:03:40.929245 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 20:03:40.934239 systemd-tmpfiles[986]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 20:03:40.969196 systemd-tmpfiles[986]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 20:03:40.978790 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 20:03:40.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:41.126198 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 20:03:41.129371 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 20:03:41.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:41.277890 systemd-fsck[991]: fsck.fat 4.2 (2021-01-31) Oct 2 20:03:41.277890 systemd-fsck[991]: /dev/vda1: 789 files, 115069/258078 clusters Oct 2 20:03:41.280060 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 20:03:41.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:41.284646 systemd[1]: Mounting boot.mount... Oct 2 20:03:41.342913 systemd[1]: Mounted boot.mount. Oct 2 20:03:41.553304 systemd[1]: Finished systemd-boot-update.service. Oct 2 20:03:41.553000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:41.579006 systemd-networkd[955]: eth0: Gained IPv6LL Oct 2 20:03:41.829160 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 20:03:41.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:41.833228 systemd[1]: Starting audit-rules.service... Oct 2 20:03:41.836843 systemd[1]: Starting clean-ca-certificates.service... Oct 2 20:03:41.840329 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 20:03:41.844000 audit: BPF prog-id=27 op=LOAD Oct 2 20:03:41.847228 systemd[1]: Starting systemd-resolved.service... Oct 2 20:03:41.849000 audit: BPF prog-id=28 op=LOAD Oct 2 20:03:41.852484 systemd[1]: Starting systemd-timesyncd.service... Oct 2 20:03:41.857105 systemd[1]: Starting systemd-update-utmp.service... Oct 2 20:03:41.905000 audit[999]: SYSTEM_BOOT pid=999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:03:41.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:41.913763 systemd[1]: Finished systemd-update-utmp.service. Oct 2 20:03:41.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:41.923249 systemd[1]: Finished clean-ca-certificates.service. Oct 2 20:03:41.923832 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 20:03:41.979406 systemd[1]: Started systemd-timesyncd.service. Oct 2 20:03:41.980235 systemd[1]: Reached target time-set.target. Oct 2 20:03:41.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:41.989952 systemd-resolved[997]: Positive Trust Anchors: Oct 2 20:03:41.989966 systemd-resolved[997]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:03:41.990004 systemd-resolved[997]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:03:42.005597 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 20:03:42.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:42.478312 systemd-timesyncd[998]: Contacted time server 45.128.41.10:123 (0.flatcar.pool.ntp.org). Oct 2 20:03:42.478698 systemd-timesyncd[998]: Initial clock synchronization to Mon 2023-10-02 20:03:42.478196 UTC. Oct 2 20:03:42.484000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 20:03:42.484000 audit[1015]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc8f0377e0 a2=420 a3=0 items=0 ppid=994 pid=1015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:03:42.484000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 20:03:42.485788 augenrules[1015]: No rules Oct 2 20:03:42.486721 systemd[1]: Finished audit-rules.service. Oct 2 20:03:42.492158 systemd-resolved[997]: Using system hostname 'ci-3510-3-0-e-e383a0c9b4.novalocal'. Oct 2 20:03:42.494485 systemd[1]: Started systemd-resolved.service. Oct 2 20:03:42.495249 systemd[1]: Reached target network.target. Oct 2 20:03:42.495694 systemd[1]: Reached target nss-lookup.target. Oct 2 20:03:43.091598 ldconfig[982]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 20:03:43.122189 systemd[1]: Finished ldconfig.service. Oct 2 20:03:43.126587 systemd[1]: Starting systemd-update-done.service... Oct 2 20:03:43.142860 systemd[1]: Finished systemd-update-done.service. Oct 2 20:03:43.144391 systemd[1]: Reached target sysinit.target. Oct 2 20:03:43.145678 systemd[1]: Started motdgen.path. Oct 2 20:03:43.146808 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 20:03:43.148624 systemd[1]: Started logrotate.timer. Oct 2 20:03:43.149898 systemd[1]: Started mdadm.timer. Oct 2 20:03:43.150980 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 20:03:43.152176 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 20:03:43.152253 systemd[1]: Reached target paths.target. Oct 2 20:03:43.153293 systemd[1]: Reached target timers.target. Oct 2 20:03:43.155629 systemd[1]: Listening on dbus.socket. Oct 2 20:03:43.159404 systemd[1]: Starting docker.socket... Oct 2 20:03:43.167132 systemd[1]: Listening on sshd.socket. Oct 2 20:03:43.168480 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:03:43.169616 systemd[1]: Listening on docker.socket. Oct 2 20:03:43.170867 systemd[1]: Reached target sockets.target. Oct 2 20:03:43.172085 systemd[1]: Reached target basic.target. Oct 2 20:03:43.173296 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:03:43.173367 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:03:43.176007 systemd[1]: Starting containerd.service... Oct 2 20:03:43.180069 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 20:03:43.184265 systemd[1]: Starting dbus.service... Oct 2 20:03:43.191695 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 20:03:43.197281 systemd[1]: Starting extend-filesystems.service... Oct 2 20:03:43.198772 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 20:03:43.211089 systemd[1]: Starting motdgen.service... Oct 2 20:03:43.216277 jq[1028]: false Oct 2 20:03:43.216195 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 20:03:43.221663 systemd[1]: Starting prepare-critools.service... Oct 2 20:03:43.228561 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 20:03:43.236994 systemd[1]: Starting sshd-keygen.service... Oct 2 20:03:43.248787 systemd[1]: Starting systemd-logind.service... Oct 2 20:03:43.249395 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:03:43.249481 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 20:03:43.250691 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 20:03:43.251591 systemd[1]: Starting update-engine.service... Oct 2 20:03:43.253203 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 20:03:43.256987 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 20:03:43.257466 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 20:03:43.260719 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 20:03:43.261664 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 20:03:43.262409 jq[1045]: true Oct 2 20:03:43.270014 systemd[1]: Created slice system-sshd.slice. Oct 2 20:03:43.280869 tar[1048]: ./ Oct 2 20:03:43.280869 tar[1048]: ./loopback Oct 2 20:03:43.284833 tar[1049]: crictl Oct 2 20:03:43.300988 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 20:03:43.301167 systemd[1]: Finished motdgen.service. Oct 2 20:03:43.302874 dbus-daemon[1025]: [system] SELinux support is enabled Oct 2 20:03:43.303358 systemd[1]: Started dbus.service. Oct 2 20:03:43.305979 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 20:03:43.306997 systemd[1]: Reached target system-config.target. Oct 2 20:03:43.307499 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 20:03:43.307525 systemd[1]: Reached target user-config.target. Oct 2 20:03:43.311087 extend-filesystems[1029]: Found vda Oct 2 20:03:43.316199 jq[1050]: true Oct 2 20:03:43.317399 extend-filesystems[1029]: Found vda1 Oct 2 20:03:43.318389 extend-filesystems[1029]: Found vda2 Oct 2 20:03:43.320053 extend-filesystems[1029]: Found vda3 Oct 2 20:03:43.321014 extend-filesystems[1029]: Found usr Oct 2 20:03:43.321014 extend-filesystems[1029]: Found vda4 Oct 2 20:03:43.321014 extend-filesystems[1029]: Found vda6 Oct 2 20:03:43.321014 extend-filesystems[1029]: Found vda7 Oct 2 20:03:43.321014 extend-filesystems[1029]: Found vda9 Oct 2 20:03:43.321014 extend-filesystems[1029]: Checking size of /dev/vda9 Oct 2 20:03:43.361663 extend-filesystems[1029]: Resized partition /dev/vda9 Oct 2 20:03:43.386778 extend-filesystems[1078]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 20:03:43.420299 env[1054]: time="2023-10-02T20:03:43.420169723Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 20:03:43.482985 kernel: EXT4-fs (vda9): resizing filesystem from 1617920 to 4635643 blocks Oct 2 20:03:43.509406 tar[1048]: ./bandwidth Oct 2 20:03:43.537346 update_engine[1044]: I1002 20:03:43.533427 1044 main.cc:92] Flatcar Update Engine starting Oct 2 20:03:43.655012 env[1054]: time="2023-10-02T20:03:43.545311877Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 20:03:43.655178 update_engine[1044]: I1002 20:03:43.551730 1044 update_check_scheduler.cc:74] Next update check in 6m5s Oct 2 20:03:43.549349 systemd[1]: Started update-engine.service. Oct 2 20:03:43.655294 coreos-metadata[1024]: Oct 02 20:03:43.547 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys: Attempt #1 Oct 2 20:03:43.647477 systemd[1]: Started locksmithd.service. Oct 2 20:03:43.657962 env[1054]: time="2023-10-02T20:03:43.654895360Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:03:43.657962 env[1054]: time="2023-10-02T20:03:43.657427349Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:03:43.657962 env[1054]: time="2023-10-02T20:03:43.657459439Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:03:43.657962 env[1054]: time="2023-10-02T20:03:43.657684642Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:03:43.657962 env[1054]: time="2023-10-02T20:03:43.657707134Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 20:03:43.657962 env[1054]: time="2023-10-02T20:03:43.657723855Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 20:03:43.657962 env[1054]: time="2023-10-02T20:03:43.657736409Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 20:03:43.657962 env[1054]: time="2023-10-02T20:03:43.657826568Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:03:43.659485 env[1054]: time="2023-10-02T20:03:43.659461324Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:03:43.659822 env[1054]: time="2023-10-02T20:03:43.659782196Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:03:43.659948 env[1054]: time="2023-10-02T20:03:43.659895578Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 20:03:43.660491 systemd-logind[1043]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 20:03:43.660551 systemd-logind[1043]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 20:03:43.664704 systemd-logind[1043]: New seat seat0. Oct 2 20:03:43.671967 env[1054]: time="2023-10-02T20:03:43.671710537Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 20:03:43.671967 env[1054]: time="2023-10-02T20:03:43.671762425Z" level=info msg="metadata content store policy set" policy=shared Oct 2 20:03:43.672405 systemd[1]: Started systemd-logind.service. Oct 2 20:03:43.674703 bash[1081]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:03:43.676588 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 20:03:43.702962 kernel: EXT4-fs (vda9): resized filesystem to 4635643 Oct 2 20:03:43.855944 extend-filesystems[1078]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Oct 2 20:03:43.855944 extend-filesystems[1078]: old_desc_blocks = 1, new_desc_blocks = 3 Oct 2 20:03:43.855944 extend-filesystems[1078]: The filesystem on /dev/vda9 is now 4635643 (4k) blocks long. Oct 2 20:03:43.863040 extend-filesystems[1029]: Resized filesystem in /dev/vda9 Oct 2 20:03:43.858183 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 20:03:43.865452 env[1054]: time="2023-10-02T20:03:43.863684024Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 20:03:43.865452 env[1054]: time="2023-10-02T20:03:43.863752201Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 20:03:43.865452 env[1054]: time="2023-10-02T20:03:43.863770906Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 20:03:43.865452 env[1054]: time="2023-10-02T20:03:43.863832272Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 20:03:43.865452 env[1054]: time="2023-10-02T20:03:43.863858461Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 20:03:43.865452 env[1054]: time="2023-10-02T20:03:43.863878408Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 20:03:43.865452 env[1054]: time="2023-10-02T20:03:43.863896312Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 20:03:43.865452 env[1054]: time="2023-10-02T20:03:43.863951145Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 20:03:43.865452 env[1054]: time="2023-10-02T20:03:43.863970781Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 20:03:43.865452 env[1054]: time="2023-10-02T20:03:43.863987783Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 20:03:43.865452 env[1054]: time="2023-10-02T20:03:43.864004114Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 20:03:43.865452 env[1054]: time="2023-10-02T20:03:43.864019954Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 20:03:43.865452 env[1054]: time="2023-10-02T20:03:43.864224627Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 20:03:43.865452 env[1054]: time="2023-10-02T20:03:43.864331257Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 20:03:43.858622 systemd[1]: Finished extend-filesystems.service. Oct 2 20:03:43.865904 env[1054]: time="2023-10-02T20:03:43.864839911Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 20:03:43.865904 env[1054]: time="2023-10-02T20:03:43.864977810Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 20:03:43.865904 env[1054]: time="2023-10-02T20:03:43.865019669Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 20:03:43.865904 env[1054]: time="2023-10-02T20:03:43.865120608Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 20:03:43.865904 env[1054]: time="2023-10-02T20:03:43.865162336Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 20:03:43.865904 env[1054]: time="2023-10-02T20:03:43.865198794Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 20:03:43.865904 env[1054]: time="2023-10-02T20:03:43.865231396Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 20:03:43.865904 env[1054]: time="2023-10-02T20:03:43.865263346Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 20:03:43.865904 env[1054]: time="2023-10-02T20:03:43.865296498Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 20:03:43.865904 env[1054]: time="2023-10-02T20:03:43.865328047Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 20:03:43.865904 env[1054]: time="2023-10-02T20:03:43.865358905Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 20:03:43.865904 env[1054]: time="2023-10-02T20:03:43.865397768Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 20:03:43.865904 env[1054]: time="2023-10-02T20:03:43.865785204Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 20:03:43.865904 env[1054]: time="2023-10-02T20:03:43.865830249Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 20:03:43.865904 env[1054]: time="2023-10-02T20:03:43.865865194Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 20:03:43.866289 env[1054]: time="2023-10-02T20:03:43.865900250Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 20:03:43.866289 env[1054]: time="2023-10-02T20:03:43.865990760Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 20:03:43.866289 env[1054]: time="2023-10-02T20:03:43.866037477Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 20:03:43.866289 env[1054]: time="2023-10-02T20:03:43.866084846Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 20:03:43.866289 env[1054]: time="2023-10-02T20:03:43.866172220Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 20:03:43.866809 env[1054]: time="2023-10-02T20:03:43.866665746Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 20:03:43.878163 env[1054]: time="2023-10-02T20:03:43.866853498Z" level=info msg="Connect containerd service" Oct 2 20:03:43.878163 env[1054]: time="2023-10-02T20:03:43.867614094Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 20:03:43.878163 env[1054]: time="2023-10-02T20:03:43.872490831Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 20:03:43.878163 env[1054]: time="2023-10-02T20:03:43.872757150Z" level=info msg="Start subscribing containerd event" Oct 2 20:03:43.878163 env[1054]: time="2023-10-02T20:03:43.872817563Z" level=info msg="Start recovering state" Oct 2 20:03:43.878163 env[1054]: time="2023-10-02T20:03:43.872881463Z" level=info msg="Start event monitor" Oct 2 20:03:43.878163 env[1054]: time="2023-10-02T20:03:43.872895279Z" level=info msg="Start snapshots syncer" Oct 2 20:03:43.878163 env[1054]: time="2023-10-02T20:03:43.872906160Z" level=info msg="Start cni network conf syncer for default" Oct 2 20:03:43.878163 env[1054]: time="2023-10-02T20:03:43.872931647Z" level=info msg="Start streaming server" Oct 2 20:03:43.878163 env[1054]: time="2023-10-02T20:03:43.873383234Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 20:03:43.878163 env[1054]: time="2023-10-02T20:03:43.873606203Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 20:03:43.882804 env[1054]: time="2023-10-02T20:03:43.882775089Z" level=info msg="containerd successfully booted in 0.464904s" Oct 2 20:03:43.883002 systemd[1]: Started containerd.service. Oct 2 20:03:43.922017 tar[1048]: ./ptp Oct 2 20:03:43.946251 coreos-metadata[1024]: Oct 02 20:03:43.946 INFO Fetch successful Oct 2 20:03:43.946251 coreos-metadata[1024]: Oct 02 20:03:43.946 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 20:03:43.956615 coreos-metadata[1024]: Oct 02 20:03:43.956 INFO Fetch successful Oct 2 20:03:43.965640 unknown[1024]: wrote ssh authorized keys file for user: core Oct 2 20:03:44.026358 update-ssh-keys[1092]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:03:44.027272 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 20:03:44.029720 tar[1048]: ./vlan Oct 2 20:03:44.099870 tar[1048]: ./host-device Oct 2 20:03:44.145891 tar[1048]: ./tuning Oct 2 20:03:44.185310 tar[1048]: ./vrf Oct 2 20:03:44.230654 tar[1048]: ./sbr Oct 2 20:03:44.272685 tar[1048]: ./tap Oct 2 20:03:44.319283 tar[1048]: ./dhcp Oct 2 20:03:44.438879 tar[1048]: ./static Oct 2 20:03:44.473414 tar[1048]: ./firewall Oct 2 20:03:44.525216 tar[1048]: ./macvlan Oct 2 20:03:44.570899 tar[1048]: ./dummy Oct 2 20:03:44.616710 tar[1048]: ./bridge Oct 2 20:03:44.672664 tar[1048]: ./ipvlan Oct 2 20:03:44.685396 systemd[1]: Finished prepare-critools.service. Oct 2 20:03:44.721801 tar[1048]: ./portmap Oct 2 20:03:44.761137 tar[1048]: ./host-local Oct 2 20:03:44.807951 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 20:03:44.815953 locksmithd[1086]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 20:03:45.843288 sshd_keygen[1057]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 20:03:45.884834 systemd[1]: Finished sshd-keygen.service. Oct 2 20:03:45.892586 systemd[1]: Starting issuegen.service... Oct 2 20:03:45.897431 systemd[1]: Started sshd@0-172.24.4.251:22-172.24.4.1:52754.service. Oct 2 20:03:45.904803 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 20:03:45.905201 systemd[1]: Finished issuegen.service. Oct 2 20:03:45.908827 systemd[1]: Starting systemd-user-sessions.service... Oct 2 20:03:45.922510 systemd[1]: Finished systemd-user-sessions.service. Oct 2 20:03:45.926335 systemd[1]: Started getty@tty1.service. Oct 2 20:03:45.929659 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 20:03:45.930832 systemd[1]: Reached target getty.target. Oct 2 20:03:45.931823 systemd[1]: Reached target multi-user.target. Oct 2 20:03:45.934780 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 20:03:45.945616 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 20:03:45.945775 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 20:03:45.946431 systemd[1]: Startup finished in 965ms (kernel) + 14.778s (initrd) + 10.892s (userspace) = 26.635s. Oct 2 20:03:47.432493 sshd[1106]: Accepted publickey for core from 172.24.4.1 port 52754 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:03:47.437115 sshd[1106]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:03:47.463562 systemd[1]: Created slice user-500.slice. Oct 2 20:03:47.466312 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 20:03:47.475059 systemd-logind[1043]: New session 1 of user core. Oct 2 20:03:47.489343 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 20:03:47.494739 systemd[1]: Starting user@500.service... Oct 2 20:03:47.501227 (systemd)[1115]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:03:47.629677 systemd[1115]: Queued start job for default target default.target. Oct 2 20:03:47.630684 systemd[1115]: Reached target paths.target. Oct 2 20:03:47.630801 systemd[1115]: Reached target sockets.target. Oct 2 20:03:47.630886 systemd[1115]: Reached target timers.target. Oct 2 20:03:47.630988 systemd[1115]: Reached target basic.target. Oct 2 20:03:47.631158 systemd[1115]: Reached target default.target. Oct 2 20:03:47.631269 systemd[1115]: Startup finished in 118ms. Oct 2 20:03:47.631685 systemd[1]: Started user@500.service. Oct 2 20:03:47.634689 systemd[1]: Started session-1.scope. Oct 2 20:03:48.898027 systemd[1]: Started sshd@1-172.24.4.251:22-172.24.4.1:56324.service. Oct 2 20:03:50.335716 sshd[1124]: Accepted publickey for core from 172.24.4.1 port 56324 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:03:50.339205 sshd[1124]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:03:50.350743 systemd-logind[1043]: New session 2 of user core. Oct 2 20:03:50.351059 systemd[1]: Started session-2.scope. Oct 2 20:03:50.968987 sshd[1124]: pam_unix(sshd:session): session closed for user core Oct 2 20:03:50.981241 systemd[1]: Started sshd@2-172.24.4.251:22-172.24.4.1:56334.service. Oct 2 20:03:50.983336 systemd[1]: sshd@1-172.24.4.251:22-172.24.4.1:56324.service: Deactivated successfully. Oct 2 20:03:50.986465 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 20:03:50.989579 systemd-logind[1043]: Session 2 logged out. Waiting for processes to exit. Oct 2 20:03:50.992529 systemd-logind[1043]: Removed session 2. Oct 2 20:03:52.502711 sshd[1129]: Accepted publickey for core from 172.24.4.1 port 56334 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:03:52.506284 sshd[1129]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:03:52.516405 systemd-logind[1043]: New session 3 of user core. Oct 2 20:03:52.517219 systemd[1]: Started session-3.scope. Oct 2 20:03:53.214403 sshd[1129]: pam_unix(sshd:session): session closed for user core Oct 2 20:03:53.222049 systemd[1]: sshd@2-172.24.4.251:22-172.24.4.1:56334.service: Deactivated successfully. Oct 2 20:03:53.223367 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 20:03:53.224805 systemd-logind[1043]: Session 3 logged out. Waiting for processes to exit. Oct 2 20:03:53.227514 systemd[1]: Started sshd@3-172.24.4.251:22-172.24.4.1:56340.service. Oct 2 20:03:53.230903 systemd-logind[1043]: Removed session 3. Oct 2 20:03:54.568293 sshd[1136]: Accepted publickey for core from 172.24.4.1 port 56340 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:03:54.572056 sshd[1136]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:03:54.584593 systemd-logind[1043]: New session 4 of user core. Oct 2 20:03:54.585970 systemd[1]: Started session-4.scope. Oct 2 20:03:55.227343 sshd[1136]: pam_unix(sshd:session): session closed for user core Oct 2 20:03:55.238456 systemd[1]: Started sshd@4-172.24.4.251:22-172.24.4.1:57938.service. Oct 2 20:03:55.240173 systemd[1]: sshd@3-172.24.4.251:22-172.24.4.1:56340.service: Deactivated successfully. Oct 2 20:03:55.241786 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 20:03:55.243754 systemd-logind[1043]: Session 4 logged out. Waiting for processes to exit. Oct 2 20:03:55.246379 systemd-logind[1043]: Removed session 4. Oct 2 20:03:56.404777 sshd[1141]: Accepted publickey for core from 172.24.4.1 port 57938 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:03:56.407810 sshd[1141]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:03:56.418583 systemd[1]: Started session-5.scope. Oct 2 20:03:56.420310 systemd-logind[1043]: New session 5 of user core. Oct 2 20:03:56.871115 sudo[1145]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 20:03:56.872502 sudo[1145]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:03:56.888288 dbus-daemon[1025]: \xd0\xdd\u000e\u0014\xffU: received setenforce notice (enforcing=1280047760) Oct 2 20:03:56.891489 sudo[1145]: pam_unix(sudo:session): session closed for user root Oct 2 20:03:57.130475 sshd[1141]: pam_unix(sshd:session): session closed for user core Oct 2 20:03:57.140521 systemd[1]: Started sshd@5-172.24.4.251:22-172.24.4.1:57950.service. Oct 2 20:03:57.142362 systemd[1]: sshd@4-172.24.4.251:22-172.24.4.1:57938.service: Deactivated successfully. Oct 2 20:03:57.144199 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 20:03:57.147402 systemd-logind[1043]: Session 5 logged out. Waiting for processes to exit. Oct 2 20:03:57.149997 systemd-logind[1043]: Removed session 5. Oct 2 20:03:58.340749 sshd[1148]: Accepted publickey for core from 172.24.4.1 port 57950 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:03:58.343646 sshd[1148]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:03:58.354311 systemd-logind[1043]: New session 6 of user core. Oct 2 20:03:58.355213 systemd[1]: Started session-6.scope. Oct 2 20:03:58.806001 sudo[1153]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 20:03:58.806490 sudo[1153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:03:58.813498 sudo[1153]: pam_unix(sudo:session): session closed for user root Oct 2 20:03:58.824000 sudo[1152]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 20:03:58.824476 sudo[1152]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:03:58.846469 systemd[1]: Stopping audit-rules.service... Oct 2 20:03:58.847000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:03:58.850879 kernel: kauditd_printk_skb: 130 callbacks suppressed Oct 2 20:03:58.851038 kernel: audit: type=1305 audit(1696277038.847:168): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:03:58.847000 audit[1156]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd25eb7660 a2=420 a3=0 items=0 ppid=1 pid=1156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:03:58.856868 auditctl[1156]: No rules Oct 2 20:03:58.857314 kernel: audit: type=1300 audit(1696277038.847:168): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd25eb7660 a2=420 a3=0 items=0 ppid=1 pid=1156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:03:58.867736 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 20:03:58.847000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:03:58.868193 systemd[1]: Stopped audit-rules.service. Oct 2 20:03:58.872111 kernel: audit: type=1327 audit(1696277038.847:168): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:03:58.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:58.879192 systemd[1]: Starting audit-rules.service... Oct 2 20:03:58.881062 kernel: audit: type=1131 audit(1696277038.867:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:58.918359 augenrules[1173]: No rules Oct 2 20:03:58.920592 systemd[1]: Finished audit-rules.service. Oct 2 20:03:58.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:58.924901 sudo[1152]: pam_unix(sudo:session): session closed for user root Oct 2 20:03:58.930993 kernel: audit: type=1130 audit(1696277038.920:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:58.921000 audit[1152]: USER_END pid=1152 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:03:58.921000 audit[1152]: CRED_DISP pid=1152 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:03:58.949558 kernel: audit: type=1106 audit(1696277038.921:171): pid=1152 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:03:58.949653 kernel: audit: type=1104 audit(1696277038.921:172): pid=1152 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:03:59.154312 sshd[1148]: pam_unix(sshd:session): session closed for user core Oct 2 20:03:59.168990 kernel: audit: type=1106 audit(1696277039.155:173): pid=1148 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:03:59.155000 audit[1148]: USER_END pid=1148 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:03:59.166634 systemd[1]: sshd@5-172.24.4.251:22-172.24.4.1:57950.service: Deactivated successfully. Oct 2 20:03:59.168376 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 20:03:59.155000 audit[1148]: CRED_DISP pid=1148 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:03:59.173116 systemd-logind[1043]: Session 6 logged out. Waiting for processes to exit. Oct 2 20:03:59.175210 systemd[1]: Started sshd@6-172.24.4.251:22-172.24.4.1:57966.service. Oct 2 20:03:59.189274 kernel: audit: type=1104 audit(1696277039.155:174): pid=1148 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:03:59.189375 kernel: audit: type=1131 audit(1696277039.166:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.24.4.251:22-172.24.4.1:57950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:59.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.24.4.251:22-172.24.4.1:57950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:03:59.186064 systemd-logind[1043]: Removed session 6. Oct 2 20:03:59.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.251:22-172.24.4.1:57966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:00.503000 audit[1179]: USER_ACCT pid=1179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:04:00.504489 sshd[1179]: Accepted publickey for core from 172.24.4.1 port 57966 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:04:00.505000 audit[1179]: CRED_ACQ pid=1179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:04:00.505000 audit[1179]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6f6a5350 a2=3 a3=0 items=0 ppid=1 pid=1179 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:00.505000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:04:00.507728 sshd[1179]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:04:00.519317 systemd-logind[1043]: New session 7 of user core. Oct 2 20:04:00.520333 systemd[1]: Started session-7.scope. Oct 2 20:04:00.531000 audit[1179]: USER_START pid=1179 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:04:00.534000 audit[1181]: CRED_ACQ pid=1181 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:04:01.041000 audit[1182]: USER_ACCT pid=1182 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:04:01.043167 sudo[1182]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 20:04:01.042000 audit[1182]: CRED_REFR pid=1182 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:04:01.044420 sudo[1182]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:04:01.048000 audit[1182]: USER_START pid=1182 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:04:02.136556 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:04:02.178697 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:04:02.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:02.179582 systemd[1]: Reached target network-online.target. Oct 2 20:04:02.182704 systemd[1]: Starting docker.service... Oct 2 20:04:02.283616 env[1198]: time="2023-10-02T20:04:02.283564074Z" level=info msg="Starting up" Oct 2 20:04:02.285977 env[1198]: time="2023-10-02T20:04:02.285889435Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:04:02.286709 env[1198]: time="2023-10-02T20:04:02.286663617Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:04:02.286779 env[1198]: time="2023-10-02T20:04:02.286742074Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:04:02.286818 env[1198]: time="2023-10-02T20:04:02.286778773Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:04:02.289548 env[1198]: time="2023-10-02T20:04:02.289502812Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:04:02.289635 env[1198]: time="2023-10-02T20:04:02.289545171Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:04:02.289635 env[1198]: time="2023-10-02T20:04:02.289575428Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:04:02.289635 env[1198]: time="2023-10-02T20:04:02.289601697Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:04:02.416478 env[1198]: time="2023-10-02T20:04:02.416400448Z" level=info msg="Loading containers: start." Oct 2 20:04:02.521000 audit[1229]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1229 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.521000 audit[1229]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffecc994230 a2=0 a3=7ffecc99421c items=0 ppid=1198 pid=1229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.521000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 20:04:02.524000 audit[1231]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1231 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.524000 audit[1231]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffdf038c2e0 a2=0 a3=7ffdf038c2cc items=0 ppid=1198 pid=1231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.524000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 20:04:02.526000 audit[1233]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1233 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.526000 audit[1233]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe8b2b6580 a2=0 a3=7ffe8b2b656c items=0 ppid=1198 pid=1233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.526000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:04:02.528000 audit[1235]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1235 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.528000 audit[1235]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff90166e60 a2=0 a3=7fff90166e4c items=0 ppid=1198 pid=1235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.528000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:04:02.531000 audit[1237]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1237 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.531000 audit[1237]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff7bba1e60 a2=0 a3=7fff7bba1e4c items=0 ppid=1198 pid=1237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.531000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 20:04:02.551000 audit[1242]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1242 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.551000 audit[1242]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc32e1c5d0 a2=0 a3=7ffc32e1c5bc items=0 ppid=1198 pid=1242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.551000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 20:04:02.565000 audit[1244]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1244 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.565000 audit[1244]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff3eb85ec0 a2=0 a3=7fff3eb85eac items=0 ppid=1198 pid=1244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.565000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 20:04:02.568000 audit[1246]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1246 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.568000 audit[1246]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffc012376a0 a2=0 a3=7ffc0123768c items=0 ppid=1198 pid=1246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.568000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 20:04:02.570000 audit[1248]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1248 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.570000 audit[1248]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fffcc6c91d0 a2=0 a3=7fffcc6c91bc items=0 ppid=1198 pid=1248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.570000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:04:02.591000 audit[1252]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1252 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.591000 audit[1252]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc0e607fc0 a2=0 a3=7ffc0e607fac items=0 ppid=1198 pid=1252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.591000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:04:02.594000 audit[1254]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1254 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.594000 audit[1254]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffcfb7edc0 a2=0 a3=7fffcfb7edac items=0 ppid=1198 pid=1254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.594000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:04:02.617039 kernel: Initializing XFRM netlink socket Oct 2 20:04:02.703042 env[1198]: time="2023-10-02T20:04:02.701663599Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 20:04:02.743000 audit[1262]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1262 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.743000 audit[1262]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffc08a86860 a2=0 a3=7ffc08a8684c items=0 ppid=1198 pid=1262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.743000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 20:04:02.757000 audit[1265]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1265 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.757000 audit[1265]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffd4e168c60 a2=0 a3=7ffd4e168c4c items=0 ppid=1198 pid=1265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.757000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 20:04:02.762000 audit[1268]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1268 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.762000 audit[1268]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd6943efa0 a2=0 a3=7ffd6943ef8c items=0 ppid=1198 pid=1268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.762000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 20:04:02.765000 audit[1270]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1270 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.765000 audit[1270]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffdeea1b5b0 a2=0 a3=7ffdeea1b59c items=0 ppid=1198 pid=1270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.765000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 20:04:02.768000 audit[1272]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.768000 audit[1272]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7fff8ec4bed0 a2=0 a3=7fff8ec4bebc items=0 ppid=1198 pid=1272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.768000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 20:04:02.772000 audit[1274]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1274 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.772000 audit[1274]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffd476f2040 a2=0 a3=7ffd476f202c items=0 ppid=1198 pid=1274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.772000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 20:04:02.774000 audit[1276]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.774000 audit[1276]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fff0464e080 a2=0 a3=7fff0464e06c items=0 ppid=1198 pid=1276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.774000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 20:04:02.787000 audit[1279]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1279 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.787000 audit[1279]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffc3c0d3d70 a2=0 a3=7ffc3c0d3d5c items=0 ppid=1198 pid=1279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.787000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 20:04:02.790000 audit[1281]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1281 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.790000 audit[1281]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffc26ac0f70 a2=0 a3=7ffc26ac0f5c items=0 ppid=1198 pid=1281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.790000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:04:02.793000 audit[1283]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1283 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.793000 audit[1283]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fffe0d006c0 a2=0 a3=7fffe0d006ac items=0 ppid=1198 pid=1283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.793000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:04:02.796000 audit[1285]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1285 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.796000 audit[1285]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffee5a25070 a2=0 a3=7ffee5a2505c items=0 ppid=1198 pid=1285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.796000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 20:04:02.798068 systemd-networkd[955]: docker0: Link UP Oct 2 20:04:02.809000 audit[1289]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.809000 audit[1289]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe1764b0c0 a2=0 a3=7ffe1764b0ac items=0 ppid=1198 pid=1289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.809000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:04:02.810000 audit[1290]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1290 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:02.810000 audit[1290]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe7ef455d0 a2=0 a3=7ffe7ef455bc items=0 ppid=1198 pid=1290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:02.810000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:04:02.811835 env[1198]: time="2023-10-02T20:04:02.811793648Z" level=info msg="Loading containers: done." Oct 2 20:04:02.847002 env[1198]: time="2023-10-02T20:04:02.846872549Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 20:04:02.847296 env[1198]: time="2023-10-02T20:04:02.847261208Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 20:04:02.847574 env[1198]: time="2023-10-02T20:04:02.847455272Z" level=info msg="Daemon has completed initialization" Oct 2 20:04:02.879888 systemd[1]: Started docker.service. Oct 2 20:04:02.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:02.894825 env[1198]: time="2023-10-02T20:04:02.894734544Z" level=info msg="API listen on /run/docker.sock" Oct 2 20:04:02.923507 systemd[1]: Reloading. Oct 2 20:04:03.019790 /usr/lib/systemd/system-generators/torcx-generator[1336]: time="2023-10-02T20:04:03Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:04:03.021058 /usr/lib/systemd/system-generators/torcx-generator[1336]: time="2023-10-02T20:04:03Z" level=info msg="torcx already run" Oct 2 20:04:03.107783 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:04:03.107805 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:04:03.133806 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:04:03.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.198000 audit: BPF prog-id=34 op=LOAD Oct 2 20:04:03.198000 audit: BPF prog-id=23 op=UNLOAD Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit: BPF prog-id=35 op=LOAD Oct 2 20:04:03.199000 audit: BPF prog-id=24 op=UNLOAD Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit: BPF prog-id=36 op=LOAD Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit: BPF prog-id=37 op=LOAD Oct 2 20:04:03.199000 audit: BPF prog-id=25 op=UNLOAD Oct 2 20:04:03.199000 audit: BPF prog-id=26 op=UNLOAD Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit: BPF prog-id=38 op=LOAD Oct 2 20:04:03.200000 audit: BPF prog-id=18 op=UNLOAD Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit: BPF prog-id=39 op=LOAD Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.200000 audit: BPF prog-id=40 op=LOAD Oct 2 20:04:03.200000 audit: BPF prog-id=19 op=UNLOAD Oct 2 20:04:03.200000 audit: BPF prog-id=20 op=UNLOAD Oct 2 20:04:03.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.202000 audit: BPF prog-id=41 op=LOAD Oct 2 20:04:03.202000 audit: BPF prog-id=32 op=UNLOAD Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit: BPF prog-id=42 op=LOAD Oct 2 20:04:03.205000 audit: BPF prog-id=28 op=UNLOAD Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit: BPF prog-id=43 op=LOAD Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.205000 audit: BPF prog-id=44 op=LOAD Oct 2 20:04:03.206000 audit: BPF prog-id=21 op=UNLOAD Oct 2 20:04:03.206000 audit: BPF prog-id=22 op=UNLOAD Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit: BPF prog-id=45 op=LOAD Oct 2 20:04:03.207000 audit: BPF prog-id=29 op=UNLOAD Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit: BPF prog-id=46 op=LOAD Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.207000 audit: BPF prog-id=47 op=LOAD Oct 2 20:04:03.207000 audit: BPF prog-id=30 op=UNLOAD Oct 2 20:04:03.207000 audit: BPF prog-id=31 op=UNLOAD Oct 2 20:04:03.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:03.209000 audit: BPF prog-id=48 op=LOAD Oct 2 20:04:03.209000 audit: BPF prog-id=27 op=UNLOAD Oct 2 20:04:03.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:03.216879 systemd[1]: Started kubelet.service. Oct 2 20:04:03.344692 kubelet[1383]: E1002 20:04:03.344484 1383 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 20:04:03.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:04:03.350233 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:04:03.350359 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:04:04.245050 env[1054]: time="2023-10-02T20:04:04.244964219Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 20:04:05.044710 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount34360638.mount: Deactivated successfully. Oct 2 20:04:08.428662 env[1054]: time="2023-10-02T20:04:08.428548120Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:08.431303 env[1054]: time="2023-10-02T20:04:08.431244938Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:08.434595 env[1054]: time="2023-10-02T20:04:08.434554585Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:08.438192 env[1054]: time="2023-10-02T20:04:08.438167972Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:08.440334 env[1054]: time="2023-10-02T20:04:08.440263191Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c\"" Oct 2 20:04:08.463740 env[1054]: time="2023-10-02T20:04:08.463695068Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 20:04:12.169197 env[1054]: time="2023-10-02T20:04:12.169083353Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:12.174769 env[1054]: time="2023-10-02T20:04:12.174694346Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:12.179181 env[1054]: time="2023-10-02T20:04:12.179110288Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:12.184847 env[1054]: time="2023-10-02T20:04:12.184771225Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:12.187138 env[1054]: time="2023-10-02T20:04:12.187074385Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988\"" Oct 2 20:04:12.213186 env[1054]: time="2023-10-02T20:04:12.213100537Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 20:04:13.400973 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 20:04:13.401226 kernel: audit: type=1130 audit(1696277053.396:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:13.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:13.396686 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 20:04:13.397204 systemd[1]: Stopped kubelet.service. Oct 2 20:04:13.400323 systemd[1]: Started kubelet.service. Oct 2 20:04:13.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:13.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:13.426714 kernel: audit: type=1131 audit(1696277053.396:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:13.426979 kernel: audit: type=1130 audit(1696277053.399:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:13.522338 kubelet[1412]: E1002 20:04:13.522289 1412 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 20:04:13.525820 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:04:13.526012 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:04:13.530191 kernel: audit: type=1131 audit(1696277053.525:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:04:13.525000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:04:14.851772 env[1054]: time="2023-10-02T20:04:14.851674983Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:14.857981 env[1054]: time="2023-10-02T20:04:14.857849232Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:14.862721 env[1054]: time="2023-10-02T20:04:14.862666998Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:14.867281 env[1054]: time="2023-10-02T20:04:14.867204328Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:14.870100 env[1054]: time="2023-10-02T20:04:14.869995904Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d\"" Oct 2 20:04:14.899577 env[1054]: time="2023-10-02T20:04:14.899503074Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 20:04:16.330002 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1889375433.mount: Deactivated successfully. Oct 2 20:04:17.105392 env[1054]: time="2023-10-02T20:04:17.105214649Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:17.107819 env[1054]: time="2023-10-02T20:04:17.107758599Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:17.111022 env[1054]: time="2023-10-02T20:04:17.110978893Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:17.114406 env[1054]: time="2023-10-02T20:04:17.114352099Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:17.116899 env[1054]: time="2023-10-02T20:04:17.116797818Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985\"" Oct 2 20:04:17.130358 env[1054]: time="2023-10-02T20:04:17.130297076Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 20:04:17.697371 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2153487627.mount: Deactivated successfully. Oct 2 20:04:17.713856 env[1054]: time="2023-10-02T20:04:17.713741578Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:17.717424 env[1054]: time="2023-10-02T20:04:17.717327258Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:17.723078 env[1054]: time="2023-10-02T20:04:17.722988492Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:17.729590 env[1054]: time="2023-10-02T20:04:17.729465055Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:17.732970 env[1054]: time="2023-10-02T20:04:17.732225437Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 20:04:17.758133 env[1054]: time="2023-10-02T20:04:17.758034781Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 20:04:19.169248 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3062093960.mount: Deactivated successfully. Oct 2 20:04:23.646366 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 20:04:23.666672 kernel: audit: type=1130 audit(1696277063.645:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:23.666760 kernel: audit: type=1131 audit(1696277063.645:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:23.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:23.645000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:23.646665 systemd[1]: Stopped kubelet.service. Oct 2 20:04:23.659850 systemd[1]: Started kubelet.service. Oct 2 20:04:23.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:23.680978 kernel: audit: type=1130 audit(1696277063.659:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:23.779375 kubelet[1435]: E1002 20:04:23.779327 1435 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 20:04:23.781620 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:04:23.781795 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:04:23.786190 kernel: audit: type=1131 audit(1696277063.781:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:04:23.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:04:26.284574 env[1054]: time="2023-10-02T20:04:26.284342960Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:26.288578 env[1054]: time="2023-10-02T20:04:26.288485073Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:26.292708 env[1054]: time="2023-10-02T20:04:26.292635352Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:26.296856 env[1054]: time="2023-10-02T20:04:26.296798636Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:26.298848 env[1054]: time="2023-10-02T20:04:26.298764416Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\"" Oct 2 20:04:26.331538 env[1054]: time="2023-10-02T20:04:26.331432522Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 20:04:27.403673 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount614075089.mount: Deactivated successfully. Oct 2 20:04:28.295584 env[1054]: time="2023-10-02T20:04:28.295448605Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:28.299791 env[1054]: time="2023-10-02T20:04:28.299721609Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:28.304715 env[1054]: time="2023-10-02T20:04:28.304638522Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:28.307450 env[1054]: time="2023-10-02T20:04:28.307387085Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:28.309144 env[1054]: time="2023-10-02T20:04:28.309083918Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 20:04:28.323320 update_engine[1044]: I1002 20:04:28.323220 1044 update_attempter.cc:505] Updating boot flags... Oct 2 20:04:31.620001 systemd[1]: Stopped kubelet.service. Oct 2 20:04:31.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:31.628046 kernel: audit: type=1130 audit(1696277071.619:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:31.628127 kernel: audit: type=1131 audit(1696277071.623:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:31.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:31.657573 systemd[1]: Reloading. Oct 2 20:04:31.808778 /usr/lib/systemd/system-generators/torcx-generator[1548]: time="2023-10-02T20:04:31Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:04:31.809203 /usr/lib/systemd/system-generators/torcx-generator[1548]: time="2023-10-02T20:04:31Z" level=info msg="torcx already run" Oct 2 20:04:31.889721 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:04:31.889744 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:04:31.919203 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:04:31.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:31.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:31.996983 kernel: audit: type=1400 audit(1696277071.988:395): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:31.997033 kernel: audit: type=1400 audit(1696277071.988:396): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:31.997057 kernel: audit: type=1400 audit(1696277071.988:397): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:31.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.000280 kernel: audit: type=1400 audit(1696277071.988:398): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:31.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:31.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.006909 kernel: audit: type=1400 audit(1696277071.988:399): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.006962 kernel: audit: type=1400 audit(1696277071.988:400): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:31.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:31.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.013617 kernel: audit: type=1400 audit(1696277071.988:401): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.013658 kernel: audit: type=1400 audit(1696277071.988:402): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:31.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:31.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:31.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:31.999000 audit: BPF prog-id=49 op=LOAD Oct 2 20:04:31.999000 audit: BPF prog-id=34 op=UNLOAD Oct 2 20:04:32.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.006000 audit: BPF prog-id=50 op=LOAD Oct 2 20:04:32.006000 audit: BPF prog-id=35 op=UNLOAD Oct 2 20:04:32.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.006000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.016000 audit: BPF prog-id=51 op=LOAD Oct 2 20:04:32.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.017000 audit: BPF prog-id=52 op=LOAD Oct 2 20:04:32.017000 audit: BPF prog-id=36 op=UNLOAD Oct 2 20:04:32.017000 audit: BPF prog-id=37 op=UNLOAD Oct 2 20:04:32.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.018000 audit: BPF prog-id=53 op=LOAD Oct 2 20:04:32.018000 audit: BPF prog-id=38 op=UNLOAD Oct 2 20:04:32.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.019000 audit: BPF prog-id=54 op=LOAD Oct 2 20:04:32.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.019000 audit: BPF prog-id=55 op=LOAD Oct 2 20:04:32.019000 audit: BPF prog-id=39 op=UNLOAD Oct 2 20:04:32.019000 audit: BPF prog-id=40 op=UNLOAD Oct 2 20:04:32.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.023000 audit: BPF prog-id=56 op=LOAD Oct 2 20:04:32.023000 audit: BPF prog-id=41 op=UNLOAD Oct 2 20:04:32.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.027000 audit: BPF prog-id=57 op=LOAD Oct 2 20:04:32.027000 audit: BPF prog-id=42 op=UNLOAD Oct 2 20:04:32.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.028000 audit: BPF prog-id=58 op=LOAD Oct 2 20:04:32.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.028000 audit: BPF prog-id=59 op=LOAD Oct 2 20:04:32.028000 audit: BPF prog-id=43 op=UNLOAD Oct 2 20:04:32.028000 audit: BPF prog-id=44 op=UNLOAD Oct 2 20:04:32.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.030000 audit: BPF prog-id=60 op=LOAD Oct 2 20:04:32.030000 audit: BPF prog-id=45 op=UNLOAD Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit: BPF prog-id=61 op=LOAD Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.031000 audit: BPF prog-id=62 op=LOAD Oct 2 20:04:32.032000 audit: BPF prog-id=46 op=UNLOAD Oct 2 20:04:32.032000 audit: BPF prog-id=47 op=UNLOAD Oct 2 20:04:32.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.034000 audit: BPF prog-id=63 op=LOAD Oct 2 20:04:32.034000 audit: BPF prog-id=48 op=UNLOAD Oct 2 20:04:32.054087 systemd[1]: Started kubelet.service. Oct 2 20:04:32.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:32.112682 kubelet[1595]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:04:32.113153 kubelet[1595]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:04:32.113205 kubelet[1595]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:04:32.113335 kubelet[1595]: I1002 20:04:32.113307 1595 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:04:32.806646 kubelet[1595]: I1002 20:04:32.806576 1595 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 20:04:32.806646 kubelet[1595]: I1002 20:04:32.806647 1595 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:04:32.807758 kubelet[1595]: I1002 20:04:32.807712 1595 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 20:04:32.817531 kubelet[1595]: E1002 20:04:32.817508 1595 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.251:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:32.817688 kubelet[1595]: I1002 20:04:32.817674 1595 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:04:32.820986 kubelet[1595]: I1002 20:04:32.820970 1595 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:04:32.821305 kubelet[1595]: I1002 20:04:32.821293 1595 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:04:32.821490 kubelet[1595]: I1002 20:04:32.821475 1595 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 20:04:32.821657 kubelet[1595]: I1002 20:04:32.821645 1595 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:04:32.821730 kubelet[1595]: I1002 20:04:32.821720 1595 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 20:04:32.821888 kubelet[1595]: I1002 20:04:32.821875 1595 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:04:32.834260 kubelet[1595]: I1002 20:04:32.834235 1595 kubelet.go:405] "Attempting to sync node with API server" Oct 2 20:04:32.834479 kubelet[1595]: I1002 20:04:32.834466 1595 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:04:32.834574 kubelet[1595]: I1002 20:04:32.834562 1595 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:04:32.834647 kubelet[1595]: I1002 20:04:32.834638 1595 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:04:32.836095 kubelet[1595]: I1002 20:04:32.836051 1595 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:04:32.836626 kubelet[1595]: W1002 20:04:32.836592 1595 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 20:04:32.837714 kubelet[1595]: I1002 20:04:32.837677 1595 server.go:1168] "Started kubelet" Oct 2 20:04:32.837989 kubelet[1595]: W1002 20:04:32.837897 1595 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.24.4.251:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-e-e383a0c9b4.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:32.838042 kubelet[1595]: E1002 20:04:32.838022 1595 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.251:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-e-e383a0c9b4.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:32.841333 kubelet[1595]: W1002 20:04:32.841283 1595 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.24.4.251:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:32.841462 kubelet[1595]: E1002 20:04:32.841444 1595 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.251:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:32.841657 kubelet[1595]: E1002 20:04:32.841574 1595 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510-3-0-e-e383a0c9b4.novalocal.178a6302af20672f", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510-3-0-e-e383a0c9b4.novalocal", UID:"ci-3510-3-0-e-e383a0c9b4.novalocal", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510-3-0-e-e383a0c9b4.novalocal"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 4, 32, 837633839, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 4, 32, 837633839, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.24.4.251:6443/api/v1/namespaces/default/events": dial tcp 172.24.4.251:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:04:32.841892 kubelet[1595]: I1002 20:04:32.841880 1595 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:04:32.842515 kubelet[1595]: I1002 20:04:32.842502 1595 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:04:32.843337 kubelet[1595]: I1002 20:04:32.843321 1595 server.go:461] "Adding debug handlers to kubelet server" Oct 2 20:04:32.842000 audit[1595]: AVC avc: denied { mac_admin } for pid=1595 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.842000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:04:32.842000 audit[1595]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0006e5860 a1=c0005fb638 a2=c0006e5830 a3=25 items=0 ppid=1 pid=1595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:32.842000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:04:32.843000 audit[1595]: AVC avc: denied { mac_admin } for pid=1595 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.843000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:04:32.843000 audit[1595]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0002ef460 a1=c0005fb650 a2=c0006e58f0 a3=25 items=0 ppid=1 pid=1595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:32.843000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:04:32.844535 kubelet[1595]: I1002 20:04:32.844110 1595 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:04:32.844535 kubelet[1595]: I1002 20:04:32.844235 1595 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:04:32.844535 kubelet[1595]: I1002 20:04:32.844375 1595 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:04:32.845196 kubelet[1595]: E1002 20:04:32.845181 1595 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:04:32.845286 kubelet[1595]: E1002 20:04:32.845275 1595 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:04:32.848046 kubelet[1595]: I1002 20:04:32.848026 1595 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 20:04:32.848267 kubelet[1595]: I1002 20:04:32.848249 1595 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 20:04:32.848836 kubelet[1595]: W1002 20:04:32.848795 1595 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.24.4.251:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:32.848985 kubelet[1595]: E1002 20:04:32.848966 1595 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.251:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:32.849675 kubelet[1595]: E1002 20:04:32.849658 1595 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.251:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-e-e383a0c9b4.novalocal?timeout=10s\": dial tcp 172.24.4.251:6443: connect: connection refused" interval="200ms" Oct 2 20:04:32.854000 audit[1606]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1606 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:32.854000 audit[1606]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffce0094780 a2=0 a3=7ffce009476c items=0 ppid=1595 pid=1606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:32.854000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:04:32.857000 audit[1607]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1607 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:32.857000 audit[1607]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff7a6d1ee0 a2=0 a3=7fff7a6d1ecc items=0 ppid=1595 pid=1607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:32.857000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:04:32.861000 audit[1609]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1609 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:32.861000 audit[1609]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff9da4b5a0 a2=0 a3=7fff9da4b58c items=0 ppid=1595 pid=1609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:32.861000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:04:32.865000 audit[1611]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1611 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:32.865000 audit[1611]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff5cb128a0 a2=0 a3=7fff5cb1288c items=0 ppid=1595 pid=1611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:32.865000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:04:32.891000 audit[1619]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1619 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:32.891000 audit[1619]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fffced7e420 a2=0 a3=7fffced7e40c items=0 ppid=1595 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:32.891000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 20:04:32.893800 kubelet[1595]: I1002 20:04:32.893736 1595 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:04:32.895573 kubelet[1595]: I1002 20:04:32.895550 1595 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:04:32.895697 kubelet[1595]: I1002 20:04:32.895683 1595 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:04:32.895786 kubelet[1595]: I1002 20:04:32.895773 1595 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:04:32.895000 audit[1620]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1620 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:32.895000 audit[1620]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcae0ea960 a2=0 a3=7ffcae0ea94c items=0 ppid=1595 pid=1620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:32.895000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:04:32.897000 audit[1622]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_chain pid=1622 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:32.897000 audit[1622]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe81b18900 a2=0 a3=7ffe81b188ec items=0 ppid=1595 pid=1622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:32.897000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:04:32.899000 audit[1621]: NETFILTER_CFG table=mangle:33 family=10 entries=2 op=nft_register_chain pid=1621 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:32.899000 audit[1621]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff3d9e9b20 a2=0 a3=7fff3d9e9b0c items=0 ppid=1595 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:32.899000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:04:32.899000 audit[1623]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1623 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:32.899000 audit[1623]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe42f9a620 a2=0 a3=7ffe42f9a60c items=0 ppid=1595 pid=1623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:32.899000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:04:32.901308 kubelet[1595]: I1002 20:04:32.901287 1595 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:04:32.901454 kubelet[1595]: I1002 20:04:32.901437 1595 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 20:04:32.901845 kubelet[1595]: I1002 20:04:32.901830 1595 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 20:04:32.902000 audit[1624]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1624 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:32.902000 audit[1624]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe407f4c70 a2=0 a3=7ffe407f4c5c items=0 ppid=1595 pid=1624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:32.902000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:04:32.904285 kubelet[1595]: E1002 20:04:32.904263 1595 kubelet.go:2281] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 20:04:32.904000 audit[1625]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1625 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:32.904000 audit[1625]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffc9126b3e0 a2=0 a3=7ffc9126b3cc items=0 ppid=1595 pid=1625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:32.904000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:04:32.906405 kubelet[1595]: W1002 20:04:32.906371 1595 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.24.4.251:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:32.906587 kubelet[1595]: I1002 20:04:32.901763 1595 policy_none.go:49] "None policy: Start" Oct 2 20:04:32.905000 audit[1626]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1626 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:32.905000 audit[1626]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe72fc5910 a2=0 a3=7ffe72fc58fc items=0 ppid=1595 pid=1626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:32.905000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:04:32.907073 kubelet[1595]: E1002 20:04:32.907058 1595 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.251:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:32.908032 kubelet[1595]: I1002 20:04:32.908014 1595 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:04:32.908140 kubelet[1595]: I1002 20:04:32.908127 1595 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:04:32.921168 systemd[1]: Created slice kubepods.slice. Oct 2 20:04:32.926472 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 20:04:32.929500 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 20:04:32.935466 kubelet[1595]: I1002 20:04:32.935432 1595 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:04:32.934000 audit[1595]: AVC avc: denied { mac_admin } for pid=1595 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:32.934000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:04:32.934000 audit[1595]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000fb6f30 a1=c000fd6e28 a2=c000fb6f00 a3=25 items=0 ppid=1 pid=1595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:32.934000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:04:32.935720 kubelet[1595]: I1002 20:04:32.935530 1595 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:04:32.935752 kubelet[1595]: I1002 20:04:32.935738 1595 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:04:32.937539 kubelet[1595]: E1002 20:04:32.937512 1595 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" not found" Oct 2 20:04:32.949750 kubelet[1595]: I1002 20:04:32.949719 1595 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:32.950103 kubelet[1595]: E1002 20:04:32.950083 1595 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.251:6443/api/v1/nodes\": dial tcp 172.24.4.251:6443: connect: connection refused" node="ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:33.006573 kubelet[1595]: I1002 20:04:33.006496 1595 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:04:33.010237 kubelet[1595]: I1002 20:04:33.010177 1595 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:04:33.012820 kubelet[1595]: I1002 20:04:33.012764 1595 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:04:33.030764 systemd[1]: Created slice kubepods-burstable-pod7438729577322b0078dc77030f89d857.slice. Oct 2 20:04:33.050074 kubelet[1595]: I1002 20:04:33.049795 1595 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a018f0f5d71b8221acdddd1e2caf6ff4-ca-certs\") pod \"kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"a018f0f5d71b8221acdddd1e2caf6ff4\") " pod="kube-system/kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:33.051270 kubelet[1595]: E1002 20:04:33.051238 1595 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.251:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-e-e383a0c9b4.novalocal?timeout=10s\": dial tcp 172.24.4.251:6443: connect: connection refused" interval="400ms" Oct 2 20:04:33.056383 systemd[1]: Created slice kubepods-burstable-pode4c96f9716034b7813172d2b11368ae7.slice. Oct 2 20:04:33.072822 systemd[1]: Created slice kubepods-burstable-poda018f0f5d71b8221acdddd1e2caf6ff4.slice. Oct 2 20:04:33.150084 kubelet[1595]: I1002 20:04:33.150042 1595 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a018f0f5d71b8221acdddd1e2caf6ff4-k8s-certs\") pod \"kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"a018f0f5d71b8221acdddd1e2caf6ff4\") " pod="kube-system/kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:33.151738 kubelet[1595]: I1002 20:04:33.151579 1595 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7438729577322b0078dc77030f89d857-ca-certs\") pod \"kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"7438729577322b0078dc77030f89d857\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:33.152599 kubelet[1595]: I1002 20:04:33.152010 1595 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/7438729577322b0078dc77030f89d857-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"7438729577322b0078dc77030f89d857\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:33.153246 kubelet[1595]: I1002 20:04:33.153208 1595 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a018f0f5d71b8221acdddd1e2caf6ff4-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"a018f0f5d71b8221acdddd1e2caf6ff4\") " pod="kube-system/kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:33.153816 kubelet[1595]: I1002 20:04:33.153788 1595 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:33.154511 kubelet[1595]: E1002 20:04:33.154482 1595 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.251:6443/api/v1/nodes\": dial tcp 172.24.4.251:6443: connect: connection refused" node="ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:33.154711 kubelet[1595]: I1002 20:04:33.153520 1595 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7438729577322b0078dc77030f89d857-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"7438729577322b0078dc77030f89d857\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:33.155006 kubelet[1595]: I1002 20:04:33.154913 1595 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7438729577322b0078dc77030f89d857-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"7438729577322b0078dc77030f89d857\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:33.155280 kubelet[1595]: I1002 20:04:33.155209 1595 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7438729577322b0078dc77030f89d857-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"7438729577322b0078dc77030f89d857\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:33.155576 kubelet[1595]: I1002 20:04:33.155500 1595 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e4c96f9716034b7813172d2b11368ae7-kubeconfig\") pod \"kube-scheduler-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"e4c96f9716034b7813172d2b11368ae7\") " pod="kube-system/kube-scheduler-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:33.355985 env[1054]: time="2023-10-02T20:04:33.355664341Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal,Uid:7438729577322b0078dc77030f89d857,Namespace:kube-system,Attempt:0,}" Oct 2 20:04:33.370819 env[1054]: time="2023-10-02T20:04:33.370207994Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-0-e-e383a0c9b4.novalocal,Uid:e4c96f9716034b7813172d2b11368ae7,Namespace:kube-system,Attempt:0,}" Oct 2 20:04:33.378387 env[1054]: time="2023-10-02T20:04:33.378319829Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal,Uid:a018f0f5d71b8221acdddd1e2caf6ff4,Namespace:kube-system,Attempt:0,}" Oct 2 20:04:33.452647 kubelet[1595]: E1002 20:04:33.452582 1595 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.251:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-e-e383a0c9b4.novalocal?timeout=10s\": dial tcp 172.24.4.251:6443: connect: connection refused" interval="800ms" Oct 2 20:04:33.559385 kubelet[1595]: I1002 20:04:33.558894 1595 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:33.559785 kubelet[1595]: E1002 20:04:33.559716 1595 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.251:6443/api/v1/nodes\": dial tcp 172.24.4.251:6443: connect: connection refused" node="ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:33.944834 kubelet[1595]: W1002 20:04:33.944689 1595 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.24.4.251:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:33.944834 kubelet[1595]: E1002 20:04:33.944836 1595 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.251:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:33.992731 kubelet[1595]: W1002 20:04:33.992535 1595 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.24.4.251:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-e-e383a0c9b4.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:33.992731 kubelet[1595]: E1002 20:04:33.992680 1595 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.251:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-e-e383a0c9b4.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:34.098470 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1863575721.mount: Deactivated successfully. Oct 2 20:04:34.121686 env[1054]: time="2023-10-02T20:04:34.121550289Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:34.127672 env[1054]: time="2023-10-02T20:04:34.127595709Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:34.129911 env[1054]: time="2023-10-02T20:04:34.129859006Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:34.132829 env[1054]: time="2023-10-02T20:04:34.132749163Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:34.136347 env[1054]: time="2023-10-02T20:04:34.136292361Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:34.141464 env[1054]: time="2023-10-02T20:04:34.141401873Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:34.148089 kubelet[1595]: W1002 20:04:34.147875 1595 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.24.4.251:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:34.148089 kubelet[1595]: E1002 20:04:34.148049 1595 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.251:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:34.154081 env[1054]: time="2023-10-02T20:04:34.154020589Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:34.161701 env[1054]: time="2023-10-02T20:04:34.161627366Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:34.164073 env[1054]: time="2023-10-02T20:04:34.164048237Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:34.165227 env[1054]: time="2023-10-02T20:04:34.165206631Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:34.167215 env[1054]: time="2023-10-02T20:04:34.167178493Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:34.187525 env[1054]: time="2023-10-02T20:04:34.187485618Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:04:34.211060 env[1054]: time="2023-10-02T20:04:34.210462299Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:04:34.211060 env[1054]: time="2023-10-02T20:04:34.210520899Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:04:34.211060 env[1054]: time="2023-10-02T20:04:34.210534133Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:04:34.211060 env[1054]: time="2023-10-02T20:04:34.210706966Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/54660e57f520bdf96fa1137061471807d6292c953356f02cb1a79b2ec2c9568a pid=1635 runtime=io.containerd.runc.v2 Oct 2 20:04:34.239366 systemd[1]: Started cri-containerd-54660e57f520bdf96fa1137061471807d6292c953356f02cb1a79b2ec2c9568a.scope. Oct 2 20:04:34.250522 kubelet[1595]: W1002 20:04:34.250384 1595 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.24.4.251:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:34.250522 kubelet[1595]: E1002 20:04:34.250474 1595 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.251:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:34.259278 kubelet[1595]: E1002 20:04:34.255616 1595 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.251:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-e-e383a0c9b4.novalocal?timeout=10s\": dial tcp 172.24.4.251:6443: connect: connection refused" interval="1.6s" Oct 2 20:04:34.259512 env[1054]: time="2023-10-02T20:04:34.255689835Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:04:34.259512 env[1054]: time="2023-10-02T20:04:34.255775386Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:04:34.259512 env[1054]: time="2023-10-02T20:04:34.255790825Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:04:34.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.262000 audit: BPF prog-id=64 op=LOAD Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { bpf } for pid=1644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1635 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363630653537663532306264663936666131313337303631343731 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { perfmon } for pid=1644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=1635 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363630653537663532306264663936666131313337303631343731 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { bpf } for pid=1644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { bpf } for pid=1644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { bpf } for pid=1644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { perfmon } for pid=1644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { perfmon } for pid=1644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { perfmon } for pid=1644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { perfmon } for pid=1644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { perfmon } for pid=1644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { bpf } for pid=1644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { bpf } for pid=1644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit: BPF prog-id=65 op=LOAD Oct 2 20:04:34.263000 audit[1644]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0003b2c50 items=0 ppid=1635 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363630653537663532306264663936666131313337303631343731 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { bpf } for pid=1644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { bpf } for pid=1644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { perfmon } for pid=1644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { perfmon } for pid=1644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { perfmon } for pid=1644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { perfmon } for pid=1644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { perfmon } for pid=1644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { bpf } for pid=1644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { bpf } for pid=1644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit: BPF prog-id=66 op=LOAD Oct 2 20:04:34.263000 audit[1644]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003b2c98 items=0 ppid=1635 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363630653537663532306264663936666131313337303631343731 Oct 2 20:04:34.263000 audit: BPF prog-id=66 op=UNLOAD Oct 2 20:04:34.263000 audit: BPF prog-id=65 op=UNLOAD Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { bpf } for pid=1644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { bpf } for pid=1644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { bpf } for pid=1644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { perfmon } for pid=1644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { perfmon } for pid=1644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { perfmon } for pid=1644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { perfmon } for pid=1644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { perfmon } for pid=1644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { bpf } for pid=1644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit[1644]: AVC avc: denied { bpf } for pid=1644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.263000 audit: BPF prog-id=67 op=LOAD Oct 2 20:04:34.263000 audit[1644]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003b30a8 items=0 ppid=1635 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363630653537663532306264663936666131313337303631343731 Oct 2 20:04:34.271405 env[1054]: time="2023-10-02T20:04:34.267271396Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c1c1ad397556ca376089670d83c957a57ad5e42b81c6986764d2d2d7efe84923 pid=1663 runtime=io.containerd.runc.v2 Oct 2 20:04:34.288339 systemd[1]: Started cri-containerd-c1c1ad397556ca376089670d83c957a57ad5e42b81c6986764d2d2d7efe84923.scope. Oct 2 20:04:34.299817 env[1054]: time="2023-10-02T20:04:34.299694699Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:04:34.299817 env[1054]: time="2023-10-02T20:04:34.299760722Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:04:34.300215 env[1054]: time="2023-10-02T20:04:34.299774858Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:04:34.308790 env[1054]: time="2023-10-02T20:04:34.308093554Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9a803af6c8ec38a8362275927bcbe017308ef92a5219ef5ed6377baef2ebe779 pid=1692 runtime=io.containerd.runc.v2 Oct 2 20:04:34.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.334000 audit: BPF prog-id=68 op=LOAD Oct 2 20:04:34.335000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.335000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1663 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331633161643339373535366361333736303839363730643833633935 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1663 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331633161643339373535366361333736303839363730643833633935 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit: BPF prog-id=69 op=LOAD Oct 2 20:04:34.336000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003cc950 items=0 ppid=1663 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331633161643339373535366361333736303839363730643833633935 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.336000 audit: BPF prog-id=70 op=LOAD Oct 2 20:04:34.336000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003cc998 items=0 ppid=1663 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331633161643339373535366361333736303839363730643833633935 Oct 2 20:04:34.337000 audit: BPF prog-id=70 op=UNLOAD Oct 2 20:04:34.337000 audit: BPF prog-id=69 op=UNLOAD Oct 2 20:04:34.337000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.337000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.337000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.337000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.337000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.337000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.337000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.337000 audit[1678]: AVC avc: denied { perfmon } for pid=1678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.337000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.337000 audit[1678]: AVC avc: denied { bpf } for pid=1678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.337000 audit: BPF prog-id=71 op=LOAD Oct 2 20:04:34.337000 audit[1678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ccda8 items=0 ppid=1663 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331633161643339373535366361333736303839363730643833633935 Oct 2 20:04:34.341580 env[1054]: time="2023-10-02T20:04:34.341523137Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal,Uid:a018f0f5d71b8221acdddd1e2caf6ff4,Namespace:kube-system,Attempt:0,} returns sandbox id \"54660e57f520bdf96fa1137061471807d6292c953356f02cb1a79b2ec2c9568a\"" Oct 2 20:04:34.352969 env[1054]: time="2023-10-02T20:04:34.352743582Z" level=info msg="CreateContainer within sandbox \"54660e57f520bdf96fa1137061471807d6292c953356f02cb1a79b2ec2c9568a\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 20:04:34.359435 systemd[1]: Started cri-containerd-9a803af6c8ec38a8362275927bcbe017308ef92a5219ef5ed6377baef2ebe779.scope. Oct 2 20:04:34.364767 kubelet[1595]: I1002 20:04:34.362545 1595 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:34.364767 kubelet[1595]: E1002 20:04:34.363043 1595 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.251:6443/api/v1/nodes\": dial tcp 172.24.4.251:6443: connect: connection refused" node="ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:34.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.371000 audit: BPF prog-id=72 op=LOAD Oct 2 20:04:34.372000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.372000 audit[1708]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1692 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961383033616636633865633338613833363232373539323762636265 Oct 2 20:04:34.373000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.373000 audit[1708]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1692 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961383033616636633865633338613833363232373539323762636265 Oct 2 20:04:34.373000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.373000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.373000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.373000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.373000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.373000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.373000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.373000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.373000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.373000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.373000 audit: BPF prog-id=73 op=LOAD Oct 2 20:04:34.373000 audit[1708]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002890a0 items=0 ppid=1692 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961383033616636633865633338613833363232373539323762636265 Oct 2 20:04:34.375000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.375000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.375000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.375000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.375000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.375000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.375000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.375000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.375000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.375000 audit: BPF prog-id=74 op=LOAD Oct 2 20:04:34.375000 audit[1708]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002890e8 items=0 ppid=1692 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961383033616636633865633338613833363232373539323762636265 Oct 2 20:04:34.376000 audit: BPF prog-id=74 op=UNLOAD Oct 2 20:04:34.376000 audit: BPF prog-id=73 op=UNLOAD Oct 2 20:04:34.376000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.376000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.376000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.376000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.376000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.376000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.376000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.376000 audit[1708]: AVC avc: denied { perfmon } for pid=1708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.376000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.376000 audit[1708]: AVC avc: denied { bpf } for pid=1708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.376000 audit: BPF prog-id=75 op=LOAD Oct 2 20:04:34.376000 audit[1708]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002894f8 items=0 ppid=1692 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961383033616636633865633338613833363232373539323762636265 Oct 2 20:04:34.395113 env[1054]: time="2023-10-02T20:04:34.395049683Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-0-e-e383a0c9b4.novalocal,Uid:e4c96f9716034b7813172d2b11368ae7,Namespace:kube-system,Attempt:0,} returns sandbox id \"c1c1ad397556ca376089670d83c957a57ad5e42b81c6986764d2d2d7efe84923\"" Oct 2 20:04:34.400249 env[1054]: time="2023-10-02T20:04:34.400183140Z" level=info msg="CreateContainer within sandbox \"c1c1ad397556ca376089670d83c957a57ad5e42b81c6986764d2d2d7efe84923\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 20:04:34.415776 env[1054]: time="2023-10-02T20:04:34.415724465Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal,Uid:7438729577322b0078dc77030f89d857,Namespace:kube-system,Attempt:0,} returns sandbox id \"9a803af6c8ec38a8362275927bcbe017308ef92a5219ef5ed6377baef2ebe779\"" Oct 2 20:04:34.418837 env[1054]: time="2023-10-02T20:04:34.418811129Z" level=info msg="CreateContainer within sandbox \"9a803af6c8ec38a8362275927bcbe017308ef92a5219ef5ed6377baef2ebe779\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 20:04:34.477630 env[1054]: time="2023-10-02T20:04:34.477424345Z" level=info msg="CreateContainer within sandbox \"c1c1ad397556ca376089670d83c957a57ad5e42b81c6986764d2d2d7efe84923\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"344cf0b870ca26dbe3d51595e3c86088b9870d0ddf5ca2086a9f0946d68cca36\"" Oct 2 20:04:34.482431 env[1054]: time="2023-10-02T20:04:34.482405638Z" level=info msg="StartContainer for \"344cf0b870ca26dbe3d51595e3c86088b9870d0ddf5ca2086a9f0946d68cca36\"" Oct 2 20:04:34.485256 env[1054]: time="2023-10-02T20:04:34.485217308Z" level=info msg="CreateContainer within sandbox \"54660e57f520bdf96fa1137061471807d6292c953356f02cb1a79b2ec2c9568a\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"51baede2a16c3eeec0aadad6fce29fec24823baa0c33eb939d69c16d666b2c39\"" Oct 2 20:04:34.485859 env[1054]: time="2023-10-02T20:04:34.485823691Z" level=info msg="StartContainer for \"51baede2a16c3eeec0aadad6fce29fec24823baa0c33eb939d69c16d666b2c39\"" Oct 2 20:04:34.487178 env[1054]: time="2023-10-02T20:04:34.486003357Z" level=info msg="CreateContainer within sandbox \"9a803af6c8ec38a8362275927bcbe017308ef92a5219ef5ed6377baef2ebe779\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"68e9d2d933707479d705918a8e97668af621e9e3ffb12811c1e1f123c5f3d35d\"" Oct 2 20:04:34.487886 env[1054]: time="2023-10-02T20:04:34.487863761Z" level=info msg="StartContainer for \"68e9d2d933707479d705918a8e97668af621e9e3ffb12811c1e1f123c5f3d35d\"" Oct 2 20:04:34.509505 systemd[1]: Started cri-containerd-344cf0b870ca26dbe3d51595e3c86088b9870d0ddf5ca2086a9f0946d68cca36.scope. Oct 2 20:04:34.530331 systemd[1]: Started cri-containerd-51baede2a16c3eeec0aadad6fce29fec24823baa0c33eb939d69c16d666b2c39.scope. Oct 2 20:04:34.542004 systemd[1]: Started cri-containerd-68e9d2d933707479d705918a8e97668af621e9e3ffb12811c1e1f123c5f3d35d.scope. Oct 2 20:04:34.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.545000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.546000 audit: BPF prog-id=76 op=LOAD Oct 2 20:04:34.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.550000 audit: BPF prog-id=77 op=LOAD Oct 2 20:04:34.551000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.551000 audit[1767]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1663 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.551000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.551000 audit[1776]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1635 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.551000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334346366306238373063613236646265336435313539356533633836 Oct 2 20:04:34.551000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.551000 audit[1767]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1663 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.551000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334346366306238373063613236646265336435313539356533633836 Oct 2 20:04:34.552000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.552000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.552000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.552000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.552000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.552000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.552000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.552000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.552000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.551000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531626165646532613136633365656563306161646164366663653239 Oct 2 20:04:34.553000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.553000 audit[1776]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1635 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531626165646532613136633365656563306161646164366663653239 Oct 2 20:04:34.553000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.553000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.552000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.552000 audit: BPF prog-id=78 op=LOAD Oct 2 20:04:34.553000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.553000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.553000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.553000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.553000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.553000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.553000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.553000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.553000 audit: BPF prog-id=79 op=LOAD Oct 2 20:04:34.552000 audit[1767]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025370 items=0 ppid=1663 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334346366306238373063613236646265336435313539356533633836 Oct 2 20:04:34.553000 audit[1776]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000284b80 items=0 ppid=1635 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531626165646532613136633365656563306161646164366663653239 Oct 2 20:04:34.556000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit: BPF prog-id=80 op=LOAD Oct 2 20:04:34.556000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit: BPF prog-id=81 op=LOAD Oct 2 20:04:34.556000 audit[1767]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000253b8 items=0 ppid=1663 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334346366306238373063613236646265336435313539356533633836 Oct 2 20:04:34.564000 audit: BPF prog-id=81 op=UNLOAD Oct 2 20:04:34.565000 audit: BPF prog-id=78 op=UNLOAD Oct 2 20:04:34.565000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.565000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.556000 audit[1776]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000284bc8 items=0 ppid=1635 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531626165646532613136633365656563306161646164366663653239 Oct 2 20:04:34.565000 audit: BPF prog-id=80 op=UNLOAD Oct 2 20:04:34.565000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.565000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.565000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.565000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.565000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.565000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.565000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.566000 audit: BPF prog-id=79 op=UNLOAD Oct 2 20:04:34.567000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.567000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.567000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.567000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.567000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.567000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.567000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.567000 audit[1776]: AVC avc: denied { perfmon } for pid=1776 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.567000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.567000 audit[1776]: AVC avc: denied { bpf } for pid=1776 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.567000 audit: BPF prog-id=82 op=LOAD Oct 2 20:04:34.567000 audit[1776]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000284fd8 items=0 ppid=1635 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531626165646532613136633365656563306161646164366663653239 Oct 2 20:04:34.565000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.565000 audit: BPF prog-id=83 op=LOAD Oct 2 20:04:34.565000 audit[1767]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000257c8 items=0 ppid=1663 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334346366306238373063613236646265336435313539356533633836 Oct 2 20:04:34.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.586000 audit: BPF prog-id=84 op=LOAD Oct 2 20:04:34.587000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.587000 audit[1792]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1692 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638653964326439333337303734373964373035393138613865393736 Oct 2 20:04:34.588000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.588000 audit[1792]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1692 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638653964326439333337303734373964373035393138613865393736 Oct 2 20:04:34.588000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.588000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.588000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.588000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.588000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.588000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.588000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.588000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.588000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.588000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.588000 audit: BPF prog-id=85 op=LOAD Oct 2 20:04:34.588000 audit[1792]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003b0080 items=0 ppid=1692 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638653964326439333337303734373964373035393138613865393736 Oct 2 20:04:34.589000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.589000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.589000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.589000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.589000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.589000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.589000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.589000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.589000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.589000 audit: BPF prog-id=86 op=LOAD Oct 2 20:04:34.589000 audit[1792]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003b00c8 items=0 ppid=1692 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638653964326439333337303734373964373035393138613865393736 Oct 2 20:04:34.589000 audit: BPF prog-id=86 op=UNLOAD Oct 2 20:04:34.590000 audit: BPF prog-id=85 op=UNLOAD Oct 2 20:04:34.590000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.590000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.590000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.590000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.590000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.590000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.590000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.590000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.590000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.590000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:34.590000 audit: BPF prog-id=87 op=LOAD Oct 2 20:04:34.590000 audit[1792]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003b04d8 items=0 ppid=1692 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:34.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638653964326439333337303734373964373035393138613865393736 Oct 2 20:04:34.636367 kubelet[1595]: E1002 20:04:34.635625 1595 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510-3-0-e-e383a0c9b4.novalocal.178a6302af20672f", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510-3-0-e-e383a0c9b4.novalocal", UID:"ci-3510-3-0-e-e383a0c9b4.novalocal", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510-3-0-e-e383a0c9b4.novalocal"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 4, 32, 837633839, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 4, 32, 837633839, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.24.4.251:6443/api/v1/namespaces/default/events": dial tcp 172.24.4.251:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:04:34.707429 env[1054]: time="2023-10-02T20:04:34.707350762Z" level=info msg="StartContainer for \"344cf0b870ca26dbe3d51595e3c86088b9870d0ddf5ca2086a9f0946d68cca36\" returns successfully" Oct 2 20:04:34.722133 env[1054]: time="2023-10-02T20:04:34.722091913Z" level=info msg="StartContainer for \"68e9d2d933707479d705918a8e97668af621e9e3ffb12811c1e1f123c5f3d35d\" returns successfully" Oct 2 20:04:34.796344 env[1054]: time="2023-10-02T20:04:34.796235603Z" level=info msg="StartContainer for \"51baede2a16c3eeec0aadad6fce29fec24823baa0c33eb939d69c16d666b2c39\" returns successfully" Oct 2 20:04:34.925079 kubelet[1595]: E1002 20:04:34.925051 1595 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.251:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:35.857065 kubelet[1595]: E1002 20:04:35.856989 1595 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.251:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-e-e383a0c9b4.novalocal?timeout=10s\": dial tcp 172.24.4.251:6443: connect: connection refused" interval="3.2s" Oct 2 20:04:35.873070 kubelet[1595]: W1002 20:04:35.872970 1595 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.24.4.251:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-e-e383a0c9b4.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:35.873159 kubelet[1595]: E1002 20:04:35.873104 1595 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.251:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-e-e383a0c9b4.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:35.965601 kubelet[1595]: I1002 20:04:35.965558 1595 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:35.966276 kubelet[1595]: E1002 20:04:35.966244 1595 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.251:6443/api/v1/nodes\": dial tcp 172.24.4.251:6443: connect: connection refused" node="ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:35.984000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:35.984000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000056d50 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:04:35.984000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:04:35.985000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:35.985000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000231320 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:04:35.985000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:04:36.223822 kubelet[1595]: W1002 20:04:36.223689 1595 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.24.4.251:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:36.223822 kubelet[1595]: E1002 20:04:36.223777 1595 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.251:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.251:6443: connect: connection refused Oct 2 20:04:38.248000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:38.252423 kernel: kauditd_printk_skb: 561 callbacks suppressed Oct 2 20:04:38.252510 kernel: audit: type=1400 audit(1696277078.248:693): avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:38.248000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00339e000 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:04:38.276960 kernel: audit: type=1300 audit(1696277078.248:693): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00339e000 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:04:38.248000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:04:38.288955 kernel: audit: type=1327 audit(1696277078.248:693): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:04:38.249000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:38.303959 kernel: audit: type=1400 audit(1696277078.249:694): avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:38.249000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c005585340 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:04:38.321970 kernel: audit: type=1300 audit(1696277078.249:694): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c005585340 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:04:38.249000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:04:38.330940 kernel: audit: type=1327 audit(1696277078.249:694): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:04:38.251000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525367 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:38.337936 kernel: audit: type=1400 audit(1696277078.251:695): avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525367 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:38.251000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00339e510 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:04:38.343944 kernel: audit: type=1300 audit(1696277078.251:695): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00339e510 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:04:38.251000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:04:38.350940 kernel: audit: type=1327 audit(1696277078.251:695): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:04:38.253000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:38.355945 kernel: audit: type=1400 audit(1696277078.253:696): avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:38.253000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0033d7140 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:04:38.253000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:04:38.337000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:38.337000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c008eee980 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:04:38.337000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:04:38.337000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:38.337000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c003479e90 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:04:38.337000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:04:38.862316 kubelet[1595]: E1002 20:04:38.862264 1595 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "ci-3510-3-0-e-e383a0c9b4.novalocal" not found Oct 2 20:04:39.069890 kubelet[1595]: E1002 20:04:39.069836 1595 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510-3-0-e-e383a0c9b4.novalocal\" not found" node="ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:39.170816 kubelet[1595]: I1002 20:04:39.170735 1595 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:39.190142 kubelet[1595]: I1002 20:04:39.190013 1595 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:39.226689 kubelet[1595]: E1002 20:04:39.226605 1595 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" not found" Oct 2 20:04:39.327606 kubelet[1595]: E1002 20:04:39.327530 1595 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" not found" Oct 2 20:04:39.428592 kubelet[1595]: E1002 20:04:39.428392 1595 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" not found" Oct 2 20:04:39.529454 kubelet[1595]: E1002 20:04:39.529303 1595 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" not found" Oct 2 20:04:39.630183 kubelet[1595]: E1002 20:04:39.630123 1595 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" not found" Oct 2 20:04:39.731171 kubelet[1595]: E1002 20:04:39.730929 1595 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" not found" Oct 2 20:04:39.832023 kubelet[1595]: E1002 20:04:39.831959 1595 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" not found" Oct 2 20:04:39.933118 kubelet[1595]: E1002 20:04:39.933068 1595 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" not found" Oct 2 20:04:40.034338 kubelet[1595]: E1002 20:04:40.034175 1595 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" not found" Oct 2 20:04:40.569407 kubelet[1595]: W1002 20:04:40.569312 1595 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:04:40.845692 kubelet[1595]: I1002 20:04:40.845510 1595 apiserver.go:52] "Watching apiserver" Oct 2 20:04:40.949284 kubelet[1595]: I1002 20:04:40.949236 1595 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 20:04:41.018759 kubelet[1595]: I1002 20:04:41.018599 1595 reconciler.go:41] "Reconciler: start to sync state" Oct 2 20:04:41.779306 systemd[1]: Reloading. Oct 2 20:04:41.930718 /usr/lib/systemd/system-generators/torcx-generator[1881]: time="2023-10-02T20:04:41Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:04:41.930750 /usr/lib/systemd/system-generators/torcx-generator[1881]: time="2023-10-02T20:04:41Z" level=info msg="torcx already run" Oct 2 20:04:41.961528 kubelet[1595]: W1002 20:04:41.961486 1595 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:04:42.043996 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:04:42.044019 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:04:42.070359 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:04:42.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.155000 audit: BPF prog-id=88 op=LOAD Oct 2 20:04:42.156000 audit: BPF prog-id=84 op=UNLOAD Oct 2 20:04:42.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.156000 audit: BPF prog-id=89 op=LOAD Oct 2 20:04:42.156000 audit: BPF prog-id=49 op=UNLOAD Oct 2 20:04:42.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.157000 audit: BPF prog-id=90 op=LOAD Oct 2 20:04:42.157000 audit: BPF prog-id=50 op=UNLOAD Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit: BPF prog-id=91 op=LOAD Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit: BPF prog-id=92 op=LOAD Oct 2 20:04:42.158000 audit: BPF prog-id=51 op=UNLOAD Oct 2 20:04:42.158000 audit: BPF prog-id=52 op=UNLOAD Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.158000 audit: BPF prog-id=93 op=LOAD Oct 2 20:04:42.158000 audit: BPF prog-id=72 op=UNLOAD Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit: BPF prog-id=94 op=LOAD Oct 2 20:04:42.159000 audit: BPF prog-id=53 op=UNLOAD Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit: BPF prog-id=95 op=LOAD Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.159000 audit: BPF prog-id=96 op=LOAD Oct 2 20:04:42.159000 audit: BPF prog-id=54 op=UNLOAD Oct 2 20:04:42.159000 audit: BPF prog-id=55 op=UNLOAD Oct 2 20:04:42.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.162000 audit: BPF prog-id=97 op=LOAD Oct 2 20:04:42.162000 audit: BPF prog-id=77 op=UNLOAD Oct 2 20:04:42.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.163000 audit: BPF prog-id=98 op=LOAD Oct 2 20:04:42.163000 audit: BPF prog-id=56 op=UNLOAD Oct 2 20:04:42.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.166000 audit: BPF prog-id=99 op=LOAD Oct 2 20:04:42.166000 audit: BPF prog-id=68 op=UNLOAD Oct 2 20:04:42.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.168000 audit: BPF prog-id=100 op=LOAD Oct 2 20:04:42.168000 audit: BPF prog-id=57 op=UNLOAD Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit: BPF prog-id=101 op=LOAD Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit: BPF prog-id=102 op=LOAD Oct 2 20:04:42.169000 audit: BPF prog-id=58 op=UNLOAD Oct 2 20:04:42.169000 audit: BPF prog-id=59 op=UNLOAD Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.169000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.170000 audit: BPF prog-id=103 op=LOAD Oct 2 20:04:42.170000 audit: BPF prog-id=76 op=UNLOAD Oct 2 20:04:42.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.171000 audit: BPF prog-id=104 op=LOAD Oct 2 20:04:42.171000 audit: BPF prog-id=60 op=UNLOAD Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit: BPF prog-id=105 op=LOAD Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit: BPF prog-id=106 op=LOAD Oct 2 20:04:42.172000 audit: BPF prog-id=61 op=UNLOAD Oct 2 20:04:42.172000 audit: BPF prog-id=62 op=UNLOAD Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.172000 audit: BPF prog-id=107 op=LOAD Oct 2 20:04:42.172000 audit: BPF prog-id=64 op=UNLOAD Oct 2 20:04:42.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.174000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.174000 audit: BPF prog-id=108 op=LOAD Oct 2 20:04:42.174000 audit: BPF prog-id=63 op=UNLOAD Oct 2 20:04:42.193484 systemd[1]: Stopping kubelet.service... Oct 2 20:04:42.195040 kubelet[1595]: I1002 20:04:42.193137 1595 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:04:42.211418 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 20:04:42.211762 systemd[1]: Stopped kubelet.service. Oct 2 20:04:42.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:42.212009 systemd[1]: kubelet.service: Consumed 1.280s CPU time. Oct 2 20:04:42.214695 systemd[1]: Started kubelet.service. Oct 2 20:04:42.215000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:42.354963 kubelet[1928]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:04:42.354963 kubelet[1928]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:04:42.354963 kubelet[1928]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:04:42.354963 kubelet[1928]: I1002 20:04:42.348760 1928 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:04:42.354963 kubelet[1928]: I1002 20:04:42.354367 1928 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 20:04:42.354963 kubelet[1928]: I1002 20:04:42.354388 1928 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:04:42.354963 kubelet[1928]: I1002 20:04:42.354639 1928 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 20:04:42.356876 kubelet[1928]: I1002 20:04:42.356850 1928 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 20:04:42.358249 kubelet[1928]: I1002 20:04:42.358208 1928 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:04:42.357000 audit[1938]: USER_ACCT pid=1938 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:04:42.358000 audit[1938]: CRED_REFR pid=1938 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:04:42.359115 sudo[1938]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 20:04:42.359624 sudo[1938]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 20:04:42.361353 kubelet[1928]: I1002 20:04:42.361159 1928 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:04:42.361353 kubelet[1928]: I1002 20:04:42.361352 1928 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:04:42.361443 kubelet[1928]: I1002 20:04:42.361424 1928 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 20:04:42.361540 kubelet[1928]: I1002 20:04:42.361446 1928 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:04:42.361540 kubelet[1928]: I1002 20:04:42.361458 1928 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 20:04:42.361540 kubelet[1928]: I1002 20:04:42.361487 1928 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:04:42.361000 audit[1938]: USER_START pid=1938 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:04:42.373481 kubelet[1928]: I1002 20:04:42.373451 1928 kubelet.go:405] "Attempting to sync node with API server" Oct 2 20:04:42.373690 kubelet[1928]: I1002 20:04:42.373679 1928 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:04:42.373773 kubelet[1928]: I1002 20:04:42.373763 1928 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:04:42.373846 kubelet[1928]: I1002 20:04:42.373837 1928 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:04:42.375785 kubelet[1928]: I1002 20:04:42.375655 1928 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:04:42.377609 kubelet[1928]: I1002 20:04:42.377597 1928 server.go:1168] "Started kubelet" Oct 2 20:04:42.382000 audit[1928]: AVC avc: denied { mac_admin } for pid=1928 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.382000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:04:42.382000 audit[1928]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b5f800 a1=c000b24948 a2=c000b5f7d0 a3=25 items=0 ppid=1 pid=1928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:42.382000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:04:42.384301 kubelet[1928]: I1002 20:04:42.384285 1928 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:04:42.383000 audit[1928]: AVC avc: denied { mac_admin } for pid=1928 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.383000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:04:42.383000 audit[1928]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007baa00 a1=c000b24960 a2=c000b5f890 a3=25 items=0 ppid=1 pid=1928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:42.383000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:04:42.384793 kubelet[1928]: I1002 20:04:42.384781 1928 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:04:42.384968 kubelet[1928]: I1002 20:04:42.384957 1928 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:04:42.395806 kubelet[1928]: I1002 20:04:42.395784 1928 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:04:42.397063 kubelet[1928]: I1002 20:04:42.397052 1928 server.go:461] "Adding debug handlers to kubelet server" Oct 2 20:04:42.398685 kubelet[1928]: I1002 20:04:42.398674 1928 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:04:42.400955 kubelet[1928]: I1002 20:04:42.400908 1928 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 20:04:42.401414 kubelet[1928]: I1002 20:04:42.401399 1928 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 20:04:42.402086 kubelet[1928]: E1002 20:04:42.402072 1928 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:04:42.402163 kubelet[1928]: E1002 20:04:42.402154 1928 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:04:42.415478 kubelet[1928]: I1002 20:04:42.415451 1928 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:04:42.416498 kubelet[1928]: I1002 20:04:42.416486 1928 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:04:42.416608 kubelet[1928]: I1002 20:04:42.416597 1928 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 20:04:42.416683 kubelet[1928]: I1002 20:04:42.416673 1928 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 20:04:42.416783 kubelet[1928]: E1002 20:04:42.416773 1928 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:04:42.490885 kubelet[1928]: I1002 20:04:42.490857 1928 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:04:42.491084 kubelet[1928]: I1002 20:04:42.491073 1928 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:04:42.491151 kubelet[1928]: I1002 20:04:42.491141 1928 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:04:42.491377 kubelet[1928]: I1002 20:04:42.491365 1928 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 20:04:42.491455 kubelet[1928]: I1002 20:04:42.491446 1928 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 20:04:42.491510 kubelet[1928]: I1002 20:04:42.491502 1928 policy_none.go:49] "None policy: Start" Oct 2 20:04:42.492112 kubelet[1928]: I1002 20:04:42.492100 1928 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:04:42.492187 kubelet[1928]: I1002 20:04:42.492178 1928 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:04:42.492374 kubelet[1928]: I1002 20:04:42.492361 1928 state_mem.go:75] "Updated machine memory state" Oct 2 20:04:42.499308 kubelet[1928]: I1002 20:04:42.496580 1928 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:04:42.498000 audit[1928]: AVC avc: denied { mac_admin } for pid=1928 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:42.498000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:04:42.498000 audit[1928]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c001249fb0 a1=c000b24fd8 a2=c001249f80 a3=25 items=0 ppid=1 pid=1928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:42.498000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:04:42.500458 kubelet[1928]: I1002 20:04:42.500197 1928 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:04:42.501811 kubelet[1928]: I1002 20:04:42.501799 1928 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:04:42.508025 kubelet[1928]: I1002 20:04:42.508000 1928 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:42.517532 kubelet[1928]: I1002 20:04:42.517490 1928 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:04:42.517845 kubelet[1928]: I1002 20:04:42.517832 1928 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:04:42.518002 kubelet[1928]: I1002 20:04:42.517991 1928 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:04:42.526409 kubelet[1928]: I1002 20:04:42.526360 1928 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:42.526728 kubelet[1928]: I1002 20:04:42.526696 1928 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:42.533779 kubelet[1928]: W1002 20:04:42.533752 1928 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:04:42.534100 kubelet[1928]: E1002 20:04:42.534066 1928 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510-3-0-e-e383a0c9b4.novalocal\" already exists" pod="kube-system/kube-scheduler-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:42.536050 kubelet[1928]: W1002 20:04:42.536019 1928 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:04:42.536262 kubelet[1928]: E1002 20:04:42.536229 1928 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal\" already exists" pod="kube-system/kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:42.538063 kubelet[1928]: W1002 20:04:42.538048 1928 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:04:42.606709 kubelet[1928]: I1002 20:04:42.606551 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a018f0f5d71b8221acdddd1e2caf6ff4-ca-certs\") pod \"kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"a018f0f5d71b8221acdddd1e2caf6ff4\") " pod="kube-system/kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:42.607086 kubelet[1928]: I1002 20:04:42.607060 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a018f0f5d71b8221acdddd1e2caf6ff4-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"a018f0f5d71b8221acdddd1e2caf6ff4\") " pod="kube-system/kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:42.607324 kubelet[1928]: I1002 20:04:42.607302 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/7438729577322b0078dc77030f89d857-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"7438729577322b0078dc77030f89d857\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:42.607578 kubelet[1928]: I1002 20:04:42.607554 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7438729577322b0078dc77030f89d857-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"7438729577322b0078dc77030f89d857\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:42.607807 kubelet[1928]: I1002 20:04:42.607785 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a018f0f5d71b8221acdddd1e2caf6ff4-k8s-certs\") pod \"kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"a018f0f5d71b8221acdddd1e2caf6ff4\") " pod="kube-system/kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:42.608071 kubelet[1928]: I1002 20:04:42.608048 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7438729577322b0078dc77030f89d857-ca-certs\") pod \"kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"7438729577322b0078dc77030f89d857\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:42.608297 kubelet[1928]: I1002 20:04:42.608274 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7438729577322b0078dc77030f89d857-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"7438729577322b0078dc77030f89d857\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:42.608565 kubelet[1928]: I1002 20:04:42.608541 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7438729577322b0078dc77030f89d857-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"7438729577322b0078dc77030f89d857\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:42.608796 kubelet[1928]: I1002 20:04:42.608774 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e4c96f9716034b7813172d2b11368ae7-kubeconfig\") pod \"kube-scheduler-ci-3510-3-0-e-e383a0c9b4.novalocal\" (UID: \"e4c96f9716034b7813172d2b11368ae7\") " pod="kube-system/kube-scheduler-ci-3510-3-0-e-e383a0c9b4.novalocal" Oct 2 20:04:43.088840 sudo[1938]: pam_unix(sudo:session): session closed for user root Oct 2 20:04:43.088000 audit[1938]: USER_END pid=1938 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:04:43.088000 audit[1938]: CRED_DISP pid=1938 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:04:43.387164 kubelet[1928]: I1002 20:04:43.386975 1928 apiserver.go:52] "Watching apiserver" Oct 2 20:04:43.401605 kubelet[1928]: I1002 20:04:43.401554 1928 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 20:04:43.413823 kubelet[1928]: I1002 20:04:43.413782 1928 reconciler.go:41] "Reconciler: start to sync state" Oct 2 20:04:43.501296 kubelet[1928]: I1002 20:04:43.501248 1928 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510-3-0-e-e383a0c9b4.novalocal" podStartSLOduration=2.50119493 podCreationTimestamp="2023-10-02 20:04:41 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:04:43.497077356 +0000 UTC m=+1.259740133" watchObservedRunningTime="2023-10-02 20:04:43.50119493 +0000 UTC m=+1.263857657" Oct 2 20:04:43.520446 kubelet[1928]: I1002 20:04:43.520396 1928 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510-3-0-e-e383a0c9b4.novalocal" podStartSLOduration=3.520362864 podCreationTimestamp="2023-10-02 20:04:40 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:04:43.520149836 +0000 UTC m=+1.282812563" watchObservedRunningTime="2023-10-02 20:04:43.520362864 +0000 UTC m=+1.283025592" Oct 2 20:04:43.550388 kubelet[1928]: I1002 20:04:43.550353 1928 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510-3-0-e-e383a0c9b4.novalocal" podStartSLOduration=1.550320006 podCreationTimestamp="2023-10-02 20:04:42 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:04:43.538994055 +0000 UTC m=+1.301656782" watchObservedRunningTime="2023-10-02 20:04:43.550320006 +0000 UTC m=+1.312982763" Oct 2 20:04:45.142026 sudo[1182]: pam_unix(sudo:session): session closed for user root Oct 2 20:04:45.146966 kernel: kauditd_printk_skb: 271 callbacks suppressed Oct 2 20:04:45.147125 kernel: audit: type=1106 audit(1696277085.142:953): pid=1182 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:04:45.142000 audit[1182]: USER_END pid=1182 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:04:45.146000 audit[1182]: CRED_DISP pid=1182 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:04:45.165589 kernel: audit: type=1104 audit(1696277085.146:954): pid=1182 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:04:45.351040 sshd[1179]: pam_unix(sshd:session): session closed for user core Oct 2 20:04:45.352000 audit[1179]: USER_END pid=1179 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:04:45.356749 systemd[1]: sshd@6-172.24.4.251:22-172.24.4.1:57966.service: Deactivated successfully. Oct 2 20:04:45.358418 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 20:04:45.358732 systemd[1]: session-7.scope: Consumed 5.665s CPU time. Oct 2 20:04:45.368010 kernel: audit: type=1106 audit(1696277085.352:955): pid=1179 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:04:45.352000 audit[1179]: CRED_DISP pid=1179 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:04:45.369128 systemd-logind[1043]: Session 7 logged out. Waiting for processes to exit. Oct 2 20:04:45.379364 kernel: audit: type=1104 audit(1696277085.352:956): pid=1179 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:04:45.379484 kernel: audit: type=1131 audit(1696277085.354:957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.251:22-172.24.4.1:57966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:45.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.251:22-172.24.4.1:57966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:04:45.389786 systemd-logind[1043]: Removed session 7. Oct 2 20:04:50.916000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:50.916000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d6f9e0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:04:50.942302 kernel: audit: type=1400 audit(1696277090.916:958): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:50.942483 kernel: audit: type=1300 audit(1696277090.916:958): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d6f9e0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:04:50.942601 kernel: audit: type=1327 audit(1696277090.916:958): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:04:50.916000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:04:50.923000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:50.964287 kernel: audit: type=1400 audit(1696277090.923:959): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:50.923000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d6fb40 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:04:50.923000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:04:50.987620 kernel: audit: type=1300 audit(1696277090.923:959): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d6fb40 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:04:50.987795 kernel: audit: type=1327 audit(1696277090.923:959): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:04:50.987858 kernel: audit: type=1400 audit(1696277090.923:960): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:50.923000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:50.992028 kernel: audit: type=1300 audit(1696277090.923:960): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d6fdc0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:04:50.923000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d6fdc0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:04:51.001628 kernel: audit: type=1327 audit(1696277090.923:960): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:04:50.923000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:04:51.006732 kernel: audit: type=1400 audit(1696277090.927:961): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:50.927000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:04:50.927000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e3e020 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:04:50.927000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:04:51.267000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=525398 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:04:51.267000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001079d80 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:04:51.267000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:04:53.599773 kubelet[1928]: I1002 20:04:53.599733 1928 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 20:04:53.600571 env[1054]: time="2023-10-02T20:04:53.600536449Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 20:04:53.601016 kubelet[1928]: I1002 20:04:53.601000 1928 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 20:04:54.279828 kubelet[1928]: I1002 20:04:54.279779 1928 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:04:54.286581 systemd[1]: Created slice kubepods-besteffort-pod1746d920_0209_4b9e_b67a_6c43a305c4d5.slice. Oct 2 20:04:54.293185 kubelet[1928]: I1002 20:04:54.293154 1928 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:04:54.300362 systemd[1]: Created slice kubepods-burstable-pode24771d0_6a77_4c0d_80f7_a46444268524.slice. Oct 2 20:04:54.391811 kubelet[1928]: I1002 20:04:54.391776 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-cilium-cgroup\") pod \"cilium-q2r57\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " pod="kube-system/cilium-q2r57" Oct 2 20:04:54.392100 kubelet[1928]: I1002 20:04:54.392088 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-bpf-maps\") pod \"cilium-q2r57\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " pod="kube-system/cilium-q2r57" Oct 2 20:04:54.392231 kubelet[1928]: I1002 20:04:54.392221 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-etc-cni-netd\") pod \"cilium-q2r57\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " pod="kube-system/cilium-q2r57" Oct 2 20:04:54.392366 kubelet[1928]: I1002 20:04:54.392355 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e24771d0-6a77-4c0d-80f7-a46444268524-cilium-config-path\") pod \"cilium-q2r57\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " pod="kube-system/cilium-q2r57" Oct 2 20:04:54.392508 kubelet[1928]: I1002 20:04:54.392488 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mkd6x\" (UniqueName: \"kubernetes.io/projected/1746d920-0209-4b9e-b67a-6c43a305c4d5-kube-api-access-mkd6x\") pod \"kube-proxy-fdj4j\" (UID: \"1746d920-0209-4b9e-b67a-6c43a305c4d5\") " pod="kube-system/kube-proxy-fdj4j" Oct 2 20:04:54.392665 kubelet[1928]: I1002 20:04:54.392625 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-xtables-lock\") pod \"cilium-q2r57\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " pod="kube-system/cilium-q2r57" Oct 2 20:04:54.392779 kubelet[1928]: I1002 20:04:54.392769 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-host-proc-sys-net\") pod \"cilium-q2r57\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " pod="kube-system/cilium-q2r57" Oct 2 20:04:54.392898 kubelet[1928]: I1002 20:04:54.392887 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e24771d0-6a77-4c0d-80f7-a46444268524-hubble-tls\") pod \"cilium-q2r57\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " pod="kube-system/cilium-q2r57" Oct 2 20:04:54.393062 kubelet[1928]: I1002 20:04:54.393051 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1746d920-0209-4b9e-b67a-6c43a305c4d5-lib-modules\") pod \"kube-proxy-fdj4j\" (UID: \"1746d920-0209-4b9e-b67a-6c43a305c4d5\") " pod="kube-system/kube-proxy-fdj4j" Oct 2 20:04:54.393184 kubelet[1928]: I1002 20:04:54.393174 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gwbcr\" (UniqueName: \"kubernetes.io/projected/e24771d0-6a77-4c0d-80f7-a46444268524-kube-api-access-gwbcr\") pod \"cilium-q2r57\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " pod="kube-system/cilium-q2r57" Oct 2 20:04:54.393307 kubelet[1928]: I1002 20:04:54.393297 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1746d920-0209-4b9e-b67a-6c43a305c4d5-xtables-lock\") pod \"kube-proxy-fdj4j\" (UID: \"1746d920-0209-4b9e-b67a-6c43a305c4d5\") " pod="kube-system/kube-proxy-fdj4j" Oct 2 20:04:54.393429 kubelet[1928]: I1002 20:04:54.393419 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-cilium-run\") pod \"cilium-q2r57\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " pod="kube-system/cilium-q2r57" Oct 2 20:04:54.393553 kubelet[1928]: I1002 20:04:54.393543 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-hostproc\") pod \"cilium-q2r57\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " pod="kube-system/cilium-q2r57" Oct 2 20:04:54.393672 kubelet[1928]: I1002 20:04:54.393662 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-cni-path\") pod \"cilium-q2r57\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " pod="kube-system/cilium-q2r57" Oct 2 20:04:54.393795 kubelet[1928]: I1002 20:04:54.393785 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/1746d920-0209-4b9e-b67a-6c43a305c4d5-kube-proxy\") pod \"kube-proxy-fdj4j\" (UID: \"1746d920-0209-4b9e-b67a-6c43a305c4d5\") " pod="kube-system/kube-proxy-fdj4j" Oct 2 20:04:54.393926 kubelet[1928]: I1002 20:04:54.393902 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-lib-modules\") pod \"cilium-q2r57\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " pod="kube-system/cilium-q2r57" Oct 2 20:04:54.394039 kubelet[1928]: I1002 20:04:54.394029 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e24771d0-6a77-4c0d-80f7-a46444268524-clustermesh-secrets\") pod \"cilium-q2r57\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " pod="kube-system/cilium-q2r57" Oct 2 20:04:54.394208 kubelet[1928]: I1002 20:04:54.394176 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-host-proc-sys-kernel\") pod \"cilium-q2r57\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " pod="kube-system/cilium-q2r57" Oct 2 20:04:54.434535 kubelet[1928]: I1002 20:04:54.434430 1928 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:04:54.440047 systemd[1]: Created slice kubepods-besteffort-podd6880140_a3ae_4069_a5e2_6e63cd0cb052.slice. Oct 2 20:04:54.495506 kubelet[1928]: I1002 20:04:54.495464 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d6880140-a3ae-4069-a5e2-6e63cd0cb052-cilium-config-path\") pod \"cilium-operator-574c4bb98d-9qs87\" (UID: \"d6880140-a3ae-4069-a5e2-6e63cd0cb052\") " pod="kube-system/cilium-operator-574c4bb98d-9qs87" Oct 2 20:04:54.495678 kubelet[1928]: I1002 20:04:54.495550 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-m8nxc\" (UniqueName: \"kubernetes.io/projected/d6880140-a3ae-4069-a5e2-6e63cd0cb052-kube-api-access-m8nxc\") pod \"cilium-operator-574c4bb98d-9qs87\" (UID: \"d6880140-a3ae-4069-a5e2-6e63cd0cb052\") " pod="kube-system/cilium-operator-574c4bb98d-9qs87" Oct 2 20:04:54.603298 env[1054]: time="2023-10-02T20:04:54.602166568Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-fdj4j,Uid:1746d920-0209-4b9e-b67a-6c43a305c4d5,Namespace:kube-system,Attempt:0,}" Oct 2 20:04:54.610085 env[1054]: time="2023-10-02T20:04:54.609877423Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-q2r57,Uid:e24771d0-6a77-4c0d-80f7-a46444268524,Namespace:kube-system,Attempt:0,}" Oct 2 20:04:54.669842 env[1054]: time="2023-10-02T20:04:54.669660246Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:04:54.669842 env[1054]: time="2023-10-02T20:04:54.669712384Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:04:54.669842 env[1054]: time="2023-10-02T20:04:54.669727522Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:04:54.670297 env[1054]: time="2023-10-02T20:04:54.670216507Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da pid=2016 runtime=io.containerd.runc.v2 Oct 2 20:04:54.670724 env[1054]: time="2023-10-02T20:04:54.670481244Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:04:54.670814 env[1054]: time="2023-10-02T20:04:54.670752542Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:04:54.670887 env[1054]: time="2023-10-02T20:04:54.670835848Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:04:54.671472 env[1054]: time="2023-10-02T20:04:54.671353518Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f45ab3cee8933ff6d2453042f24d851869323fa13f234c8c6e05984a91df31f9 pid=2003 runtime=io.containerd.runc.v2 Oct 2 20:04:54.683278 systemd[1]: Started cri-containerd-23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da.scope. Oct 2 20:04:54.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.702000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.702000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.703000 audit: BPF prog-id=109 op=LOAD Oct 2 20:04:54.704000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.704000 audit[2027]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2016 pid=2027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233373038666361613964636439613532663136346334643236623062 Oct 2 20:04:54.705000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.705000 audit[2027]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2016 pid=2027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233373038666361613964636439613532663136346334643236623062 Oct 2 20:04:54.705000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.705000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.705000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.705000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.705000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.705000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.705000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.705000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.705000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.705000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.705000 audit: BPF prog-id=110 op=LOAD Oct 2 20:04:54.705000 audit[2027]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001df560 items=0 ppid=2016 pid=2027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233373038666361613964636439613532663136346334643236623062 Oct 2 20:04:54.706000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.706000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.706000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.706000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.706000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.706000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.706000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.706000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.706000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.706000 audit: BPF prog-id=111 op=LOAD Oct 2 20:04:54.706000 audit[2027]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001df5a8 items=0 ppid=2016 pid=2027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.706000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233373038666361613964636439613532663136346334643236623062 Oct 2 20:04:54.707000 audit: BPF prog-id=111 op=UNLOAD Oct 2 20:04:54.707000 audit: BPF prog-id=110 op=UNLOAD Oct 2 20:04:54.707000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.707000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.707000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.707000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.707000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.707000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.707000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.707000 audit[2027]: AVC avc: denied { perfmon } for pid=2027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.707000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.707000 audit[2027]: AVC avc: denied { bpf } for pid=2027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.707000 audit: BPF prog-id=112 op=LOAD Oct 2 20:04:54.707000 audit[2027]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001df9b8 items=0 ppid=2016 pid=2027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.707000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233373038666361613964636439613532663136346334643236623062 Oct 2 20:04:54.715020 systemd[1]: Started cri-containerd-f45ab3cee8933ff6d2453042f24d851869323fa13f234c8c6e05984a91df31f9.scope. Oct 2 20:04:54.732405 env[1054]: time="2023-10-02T20:04:54.732338683Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-q2r57,Uid:e24771d0-6a77-4c0d-80f7-a46444268524,Namespace:kube-system,Attempt:0,} returns sandbox id \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\"" Oct 2 20:04:54.738468 env[1054]: time="2023-10-02T20:04:54.738416899Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 20:04:54.744043 env[1054]: time="2023-10-02T20:04:54.743994157Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-9qs87,Uid:d6880140-a3ae-4069-a5e2-6e63cd0cb052,Namespace:kube-system,Attempt:0,}" Oct 2 20:04:54.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.747000 audit: BPF prog-id=113 op=LOAD Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2003 pid=2035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634356162336365653839333366663664323435333034326632346438 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2003 pid=2035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634356162336365653839333366663664323435333034326632346438 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit: BPF prog-id=114 op=LOAD Oct 2 20:04:54.749000 audit[2035]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00015de30 items=0 ppid=2003 pid=2035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634356162336365653839333366663664323435333034326632346438 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit: BPF prog-id=115 op=LOAD Oct 2 20:04:54.749000 audit[2035]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00015de78 items=0 ppid=2003 pid=2035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634356162336365653839333366663664323435333034326632346438 Oct 2 20:04:54.749000 audit: BPF prog-id=115 op=UNLOAD Oct 2 20:04:54.749000 audit: BPF prog-id=114 op=UNLOAD Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.749000 audit: BPF prog-id=116 op=LOAD Oct 2 20:04:54.749000 audit[2035]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00029e288 items=0 ppid=2003 pid=2035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634356162336365653839333366663664323435333034326632346438 Oct 2 20:04:54.771315 env[1054]: time="2023-10-02T20:04:54.771248724Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-fdj4j,Uid:1746d920-0209-4b9e-b67a-6c43a305c4d5,Namespace:kube-system,Attempt:0,} returns sandbox id \"f45ab3cee8933ff6d2453042f24d851869323fa13f234c8c6e05984a91df31f9\"" Oct 2 20:04:54.777874 env[1054]: time="2023-10-02T20:04:54.777447947Z" level=info msg="CreateContainer within sandbox \"f45ab3cee8933ff6d2453042f24d851869323fa13f234c8c6e05984a91df31f9\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 20:04:54.784305 env[1054]: time="2023-10-02T20:04:54.778727243Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:04:54.784305 env[1054]: time="2023-10-02T20:04:54.778832341Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:04:54.784305 env[1054]: time="2023-10-02T20:04:54.778848200Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:04:54.784305 env[1054]: time="2023-10-02T20:04:54.779095223Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926 pid=2087 runtime=io.containerd.runc.v2 Oct 2 20:04:54.802973 systemd[1]: Started cri-containerd-1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926.scope. Oct 2 20:04:54.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.819000 audit: BPF prog-id=117 op=LOAD Oct 2 20:04:54.821367 env[1054]: time="2023-10-02T20:04:54.819644074Z" level=info msg="CreateContainer within sandbox \"f45ab3cee8933ff6d2453042f24d851869323fa13f234c8c6e05984a91df31f9\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"cb9ef1f4a6a1ee8c8975082ebbc97c7af0b5e685495d488d0951ffec322a744b\"" Oct 2 20:04:54.821000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.821000 audit[2097]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2087 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163363532393139376234383063323831613338353532666466343732 Oct 2 20:04:54.821000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.821000 audit[2097]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2087 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163363532393139376234383063323831613338353532666466343732 Oct 2 20:04:54.821000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.821000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.821000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.821000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.821000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.821000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.821000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.821000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.821000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.821000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.821000 audit: BPF prog-id=118 op=LOAD Oct 2 20:04:54.823988 env[1054]: time="2023-10-02T20:04:54.823797585Z" level=info msg="StartContainer for \"cb9ef1f4a6a1ee8c8975082ebbc97c7af0b5e685495d488d0951ffec322a744b\"" Oct 2 20:04:54.821000 audit[2097]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00030ae30 items=0 ppid=2087 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163363532393139376234383063323831613338353532666466343732 Oct 2 20:04:54.823000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.823000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.823000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.823000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.823000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.823000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.823000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.823000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.823000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.823000 audit: BPF prog-id=119 op=LOAD Oct 2 20:04:54.823000 audit[2097]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00030ae78 items=0 ppid=2087 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163363532393139376234383063323831613338353532666466343732 Oct 2 20:04:54.824000 audit: BPF prog-id=119 op=UNLOAD Oct 2 20:04:54.824000 audit: BPF prog-id=118 op=UNLOAD Oct 2 20:04:54.824000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.824000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.824000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.824000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.824000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.824000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.824000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.824000 audit[2097]: AVC avc: denied { perfmon } for pid=2097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.824000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.824000 audit[2097]: AVC avc: denied { bpf } for pid=2097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.824000 audit: BPF prog-id=120 op=LOAD Oct 2 20:04:54.824000 audit[2097]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00030b288 items=0 ppid=2087 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163363532393139376234383063323831613338353532666466343732 Oct 2 20:04:54.845047 systemd[1]: Started cri-containerd-cb9ef1f4a6a1ee8c8975082ebbc97c7af0b5e685495d488d0951ffec322a744b.scope. Oct 2 20:04:54.870000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.870000 audit[2120]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2003 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362396566316634613661316565386338393735303832656262633937 Oct 2 20:04:54.871000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.871000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.871000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.871000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.871000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.871000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.871000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.871000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.871000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.871000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.871000 audit: BPF prog-id=121 op=LOAD Oct 2 20:04:54.871000 audit[2120]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0003cc930 items=0 ppid=2003 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362396566316634613661316565386338393735303832656262633937 Oct 2 20:04:54.877000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.877000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.877000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.877000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.877000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.877000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.877000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.877000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.877000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.877000 audit: BPF prog-id=122 op=LOAD Oct 2 20:04:54.877000 audit[2120]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c0003cc978 items=0 ppid=2003 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.877000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362396566316634613661316565386338393735303832656262633937 Oct 2 20:04:54.878000 audit: BPF prog-id=122 op=UNLOAD Oct 2 20:04:54.878000 audit: BPF prog-id=121 op=UNLOAD Oct 2 20:04:54.878000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.878000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.878000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.878000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.878000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.878000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.878000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.878000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.878000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.878000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:04:54.878000 audit: BPF prog-id=123 op=LOAD Oct 2 20:04:54.878000 audit[2120]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c0003cca08 items=0 ppid=2003 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:54.878000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362396566316634613661316565386338393735303832656262633937 Oct 2 20:04:54.899340 env[1054]: time="2023-10-02T20:04:54.899257736Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-9qs87,Uid:d6880140-a3ae-4069-a5e2-6e63cd0cb052,Namespace:kube-system,Attempt:0,} returns sandbox id \"1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926\"" Oct 2 20:04:54.918474 env[1054]: time="2023-10-02T20:04:54.918425012Z" level=info msg="StartContainer for \"cb9ef1f4a6a1ee8c8975082ebbc97c7af0b5e685495d488d0951ffec322a744b\" returns successfully" Oct 2 20:04:55.579000 audit[2172]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.579000 audit[2172]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff80031050 a2=0 a3=7fff8003103c items=0 ppid=2129 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.579000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:04:55.580000 audit[2173]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.580000 audit[2173]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffea997120 a2=0 a3=7fffea99710c items=0 ppid=2129 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.580000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:04:55.581000 audit[2174]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.581000 audit[2174]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff2bd17830 a2=0 a3=7fff2bd1781c items=0 ppid=2129 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.581000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:04:55.584000 audit[2175]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2175 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.584000 audit[2175]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe4fd07170 a2=0 a3=7ffe4fd0715c items=0 ppid=2129 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.584000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:04:55.586000 audit[2176]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2176 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.586000 audit[2176]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffca5c05710 a2=0 a3=7ffca5c056fc items=0 ppid=2129 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.586000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:04:55.594000 audit[2178]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2178 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.594000 audit[2178]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd97534e30 a2=0 a3=7ffd97534e1c items=0 ppid=2129 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.594000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:04:55.696000 audit[2179]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.696000 audit[2179]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe3ecb4f20 a2=0 a3=7ffe3ecb4f0c items=0 ppid=2129 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.696000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:04:55.703000 audit[2181]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.703000 audit[2181]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc91b49fd0 a2=0 a3=7ffc91b49fbc items=0 ppid=2129 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.703000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 20:04:55.711000 audit[2184]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.711000 audit[2184]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffee1bce6c0 a2=0 a3=7ffee1bce6ac items=0 ppid=2129 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.711000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 20:04:55.721000 audit[2185]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.721000 audit[2185]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd97d871c0 a2=0 a3=7ffd97d871ac items=0 ppid=2129 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.721000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:04:55.732000 audit[2187]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.732000 audit[2187]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffca4d4d9b0 a2=0 a3=7ffca4d4d99c items=0 ppid=2129 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.732000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:04:55.736000 audit[2188]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.736000 audit[2188]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc10a4faf0 a2=0 a3=7ffc10a4fadc items=0 ppid=2129 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.736000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:04:55.743000 audit[2190]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.743000 audit[2190]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc68d53ab0 a2=0 a3=7ffc68d53a9c items=0 ppid=2129 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.743000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:04:55.750000 audit[2193]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.750000 audit[2193]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdd344b7c0 a2=0 a3=7ffdd344b7ac items=0 ppid=2129 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.750000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 20:04:55.752000 audit[2194]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.752000 audit[2194]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdb51200b0 a2=0 a3=7ffdb512009c items=0 ppid=2129 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.752000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:04:55.758000 audit[2196]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.758000 audit[2196]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffccacd7960 a2=0 a3=7ffccacd794c items=0 ppid=2129 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.758000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:04:55.760000 audit[2197]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.760000 audit[2197]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe47affdd0 a2=0 a3=7ffe47affdbc items=0 ppid=2129 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.760000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:04:55.767000 audit[2199]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.767000 audit[2199]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffb18748e0 a2=0 a3=7fffb18748cc items=0 ppid=2129 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.767000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:04:55.774000 audit[2202]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.774000 audit[2202]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffed8b758d0 a2=0 a3=7ffed8b758bc items=0 ppid=2129 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.774000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:04:55.789000 audit[2205]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2205 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.789000 audit[2205]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcbb49ce70 a2=0 a3=7ffcbb49ce5c items=0 ppid=2129 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.789000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:04:55.791000 audit[2206]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.791000 audit[2206]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffd15f2e70 a2=0 a3=7fffd15f2e5c items=0 ppid=2129 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.791000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:04:55.796000 audit[2208]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2208 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.796000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff21853490 a2=0 a3=7fff2185347c items=0 ppid=2129 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.796000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:04:55.801000 audit[2211]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2211 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.801000 audit[2211]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc0a4ea760 a2=0 a3=7ffc0a4ea74c items=0 ppid=2129 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.801000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:04:55.821000 audit[2216]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2216 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.821000 audit[2216]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe47d0a760 a2=0 a3=7ffe47d0a74c items=0 ppid=2129 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.821000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:04:55.825000 audit[2218]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2218 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:04:55.825000 audit[2218]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffdf33415d0 a2=0 a3=7ffdf33415bc items=0 ppid=2129 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.825000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:04:55.865000 audit[2220]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:04:55.865000 audit[2220]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffff835a830 a2=0 a3=7ffff835a81c items=0 ppid=2129 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.865000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:04:55.879000 audit[2220]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:04:55.879000 audit[2220]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffff835a830 a2=0 a3=7ffff835a81c items=0 ppid=2129 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.879000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:04:55.882000 audit[2225]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.882000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe22fa8c80 a2=0 a3=7ffe22fa8c6c items=0 ppid=2129 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.882000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:04:55.890000 audit[2227]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.890000 audit[2227]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffca1920e60 a2=0 a3=7ffca1920e4c items=0 ppid=2129 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.890000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 20:04:55.904000 audit[2230]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.904000 audit[2230]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc701c9fe0 a2=0 a3=7ffc701c9fcc items=0 ppid=2129 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.904000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 20:04:55.908000 audit[2231]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.908000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffd0d8bff0 a2=0 a3=7fffd0d8bfdc items=0 ppid=2129 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.908000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:04:55.911000 audit[2233]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.911000 audit[2233]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffda5cd8070 a2=0 a3=7ffda5cd805c items=0 ppid=2129 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.911000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:04:55.913000 audit[2234]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.913000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff1dec2320 a2=0 a3=7fff1dec230c items=0 ppid=2129 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.913000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:04:55.916000 audit[2236]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.916000 audit[2236]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffefc2b71e0 a2=0 a3=7ffefc2b71cc items=0 ppid=2129 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.916000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 20:04:55.919000 audit[2239]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.921597 kernel: kauditd_printk_skb: 321 callbacks suppressed Oct 2 20:04:55.921668 kernel: audit: type=1325 audit(1696277095.919:1057): table=filter:72 family=10 entries=2 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.919000 audit[2239]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fff0bd89f90 a2=0 a3=7fff0bd89f7c items=0 ppid=2129 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.929811 kernel: audit: type=1300 audit(1696277095.919:1057): arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fff0bd89f90 a2=0 a3=7fff0bd89f7c items=0 ppid=2129 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.929964 kernel: audit: type=1327 audit(1696277095.919:1057): proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:04:55.919000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:04:55.935116 kernel: audit: type=1325 audit(1696277095.924:1058): table=filter:73 family=10 entries=1 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.924000 audit[2240]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.924000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc2a15fc40 a2=0 a3=7ffc2a15fc2c items=0 ppid=2129 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.943367 kernel: audit: type=1300 audit(1696277095.924:1058): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc2a15fc40 a2=0 a3=7ffc2a15fc2c items=0 ppid=2129 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.924000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:04:55.946973 kernel: audit: type=1327 audit(1696277095.924:1058): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:04:55.927000 audit[2242]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.927000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff6c09ab70 a2=0 a3=7fff6c09ab5c items=0 ppid=2129 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.955686 kernel: audit: type=1325 audit(1696277095.927:1059): table=filter:74 family=10 entries=1 op=nft_register_rule pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.955764 kernel: audit: type=1300 audit(1696277095.927:1059): arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff6c09ab70 a2=0 a3=7fff6c09ab5c items=0 ppid=2129 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.955789 kernel: audit: type=1327 audit(1696277095.927:1059): proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:04:55.927000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:04:55.929000 audit[2243]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.962885 kernel: audit: type=1325 audit(1696277095.929:1060): table=filter:75 family=10 entries=1 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.929000 audit[2243]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcfe64d8f0 a2=0 a3=7ffcfe64d8dc items=0 ppid=2129 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.929000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:04:55.935000 audit[2245]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.935000 audit[2245]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe5168c580 a2=0 a3=7ffe5168c56c items=0 ppid=2129 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.935000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:04:55.940000 audit[2248]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.940000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffe9905f70 a2=0 a3=7fffe9905f5c items=0 ppid=2129 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.940000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:04:55.945000 audit[2251]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.945000 audit[2251]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc78163650 a2=0 a3=7ffc7816363c items=0 ppid=2129 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.945000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 20:04:55.948000 audit[2252]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2252 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.948000 audit[2252]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe47431820 a2=0 a3=7ffe4743180c items=0 ppid=2129 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.948000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:04:55.950000 audit[2254]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.950000 audit[2254]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffd2ac719e0 a2=0 a3=7ffd2ac719cc items=0 ppid=2129 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.950000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:04:55.954000 audit[2257]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.954000 audit[2257]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffce5b13260 a2=0 a3=7ffce5b1324c items=0 ppid=2129 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.954000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:04:55.956000 audit[2258]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.956000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffec8a95140 a2=0 a3=7ffec8a9512c items=0 ppid=2129 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.956000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:04:55.958000 audit[2260]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2260 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.958000 audit[2260]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff2441d8e0 a2=0 a3=7fff2441d8cc items=0 ppid=2129 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.958000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:04:55.961000 audit[2263]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=2263 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.961000 audit[2263]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffed8f180d0 a2=0 a3=7ffed8f180bc items=0 ppid=2129 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.961000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:04:55.965000 audit[2264]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.965000 audit[2264]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcfa23f7b0 a2=0 a3=7ffcfa23f79c items=0 ppid=2129 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.965000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:04:55.968000 audit[2266]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2266 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:04:55.968000 audit[2266]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffc6b731e00 a2=0 a3=7ffc6b731dec items=0 ppid=2129 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.968000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:04:55.972000 audit[2268]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2268 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:04:55.972000 audit[2268]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffe3a7e60c0 a2=0 a3=7ffe3a7e60ac items=0 ppid=2129 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.972000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:04:55.973000 audit[2268]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2268 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:04:55.973000 audit[2268]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffe3a7e60c0 a2=0 a3=7ffe3a7e60ac items=0 ppid=2129 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:04:55.973000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:05:02.269736 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3758578408.mount: Deactivated successfully. Oct 2 20:05:02.451183 kubelet[1928]: I1002 20:05:02.451083 1928 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-fdj4j" podStartSLOduration=8.446608907 podCreationTimestamp="2023-10-02 20:04:54 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:04:55.549247051 +0000 UTC m=+13.311909818" watchObservedRunningTime="2023-10-02 20:05:02.446608907 +0000 UTC m=+20.209271684" Oct 2 20:05:06.722536 env[1054]: time="2023-10-02T20:05:06.722317655Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:05:06.732070 env[1054]: time="2023-10-02T20:05:06.731981420Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:05:06.734895 env[1054]: time="2023-10-02T20:05:06.734840810Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:05:06.736545 env[1054]: time="2023-10-02T20:05:06.736492736Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 20:05:06.743407 env[1054]: time="2023-10-02T20:05:06.740364373Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 20:05:06.745280 env[1054]: time="2023-10-02T20:05:06.745240443Z" level=info msg="CreateContainer within sandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:05:06.774728 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3525930863.mount: Deactivated successfully. Oct 2 20:05:06.790678 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount373425908.mount: Deactivated successfully. Oct 2 20:05:06.809160 env[1054]: time="2023-10-02T20:05:06.809068219Z" level=info msg="CreateContainer within sandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220\"" Oct 2 20:05:06.813455 env[1054]: time="2023-10-02T20:05:06.813386714Z" level=info msg="StartContainer for \"1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220\"" Oct 2 20:05:06.855181 systemd[1]: Started cri-containerd-1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220.scope. Oct 2 20:05:06.876342 systemd[1]: cri-containerd-1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220.scope: Deactivated successfully. Oct 2 20:05:07.687878 env[1054]: time="2023-10-02T20:05:07.687734068Z" level=info msg="shim disconnected" id=1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220 Oct 2 20:05:07.687878 env[1054]: time="2023-10-02T20:05:07.687846368Z" level=warning msg="cleaning up after shim disconnected" id=1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220 namespace=k8s.io Oct 2 20:05:07.687878 env[1054]: time="2023-10-02T20:05:07.687872036Z" level=info msg="cleaning up dead shim" Oct 2 20:05:07.712912 env[1054]: time="2023-10-02T20:05:07.712805616Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:05:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2296 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:05:07Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:05:07.713602 env[1054]: time="2023-10-02T20:05:07.713364113Z" level=error msg="copy shim log" error="read /proc/self/fd/52: file already closed" Oct 2 20:05:07.714111 env[1054]: time="2023-10-02T20:05:07.714019200Z" level=error msg="Failed to pipe stdout of container \"1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220\"" error="reading from a closed fifo" Oct 2 20:05:07.716026 env[1054]: time="2023-10-02T20:05:07.715897031Z" level=error msg="Failed to pipe stderr of container \"1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220\"" error="reading from a closed fifo" Oct 2 20:05:07.721279 env[1054]: time="2023-10-02T20:05:07.721159957Z" level=error msg="StartContainer for \"1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:05:07.721979 kubelet[1928]: E1002 20:05:07.721724 1928 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220" Oct 2 20:05:07.725340 kubelet[1928]: E1002 20:05:07.723003 1928 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:05:07.725340 kubelet[1928]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:05:07.725340 kubelet[1928]: rm /hostbin/cilium-mount Oct 2 20:05:07.725754 kubelet[1928]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gwbcr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:05:07.725754 kubelet[1928]: E1002 20:05:07.723122 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:05:07.765033 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220-rootfs.mount: Deactivated successfully. Oct 2 20:05:08.629356 env[1054]: time="2023-10-02T20:05:08.629251526Z" level=info msg="CreateContainer within sandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:05:08.848753 env[1054]: time="2023-10-02T20:05:08.848564424Z" level=info msg="CreateContainer within sandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11\"" Oct 2 20:05:08.851463 env[1054]: time="2023-10-02T20:05:08.851361237Z" level=info msg="StartContainer for \"79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11\"" Oct 2 20:05:08.920224 systemd[1]: Started cri-containerd-79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11.scope. Oct 2 20:05:08.930648 systemd[1]: cri-containerd-79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11.scope: Deactivated successfully. Oct 2 20:05:08.930972 systemd[1]: Stopped cri-containerd-79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11.scope. Oct 2 20:05:08.981375 env[1054]: time="2023-10-02T20:05:08.981286237Z" level=info msg="shim disconnected" id=79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11 Oct 2 20:05:08.981375 env[1054]: time="2023-10-02T20:05:08.981375835Z" level=warning msg="cleaning up after shim disconnected" id=79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11 namespace=k8s.io Oct 2 20:05:08.981631 env[1054]: time="2023-10-02T20:05:08.981387617Z" level=info msg="cleaning up dead shim" Oct 2 20:05:08.991130 env[1054]: time="2023-10-02T20:05:08.991065599Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:05:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2335 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:05:08Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:05:08.991419 env[1054]: time="2023-10-02T20:05:08.991354290Z" level=error msg="copy shim log" error="read /proc/self/fd/54: file already closed" Oct 2 20:05:08.994405 env[1054]: time="2023-10-02T20:05:08.994364513Z" level=error msg="Failed to pipe stdout of container \"79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11\"" error="reading from a closed fifo" Oct 2 20:05:08.994571 env[1054]: time="2023-10-02T20:05:08.994540954Z" level=error msg="Failed to pipe stderr of container \"79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11\"" error="reading from a closed fifo" Oct 2 20:05:09.014443 env[1054]: time="2023-10-02T20:05:09.014348016Z" level=error msg="StartContainer for \"79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:05:09.015092 kubelet[1928]: E1002 20:05:09.015041 1928 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11" Oct 2 20:05:09.015450 kubelet[1928]: E1002 20:05:09.015200 1928 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:05:09.015450 kubelet[1928]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:05:09.015450 kubelet[1928]: rm /hostbin/cilium-mount Oct 2 20:05:09.015450 kubelet[1928]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gwbcr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:05:09.015450 kubelet[1928]: E1002 20:05:09.015252 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:05:09.629136 kubelet[1928]: I1002 20:05:09.629077 1928 scope.go:115] "RemoveContainer" containerID="1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220" Oct 2 20:05:09.629882 kubelet[1928]: I1002 20:05:09.629847 1928 scope.go:115] "RemoveContainer" containerID="1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220" Oct 2 20:05:09.645239 env[1054]: time="2023-10-02T20:05:09.645116390Z" level=info msg="RemoveContainer for \"1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220\"" Oct 2 20:05:09.654155 env[1054]: time="2023-10-02T20:05:09.654061189Z" level=info msg="RemoveContainer for \"1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220\"" Oct 2 20:05:09.654798 env[1054]: time="2023-10-02T20:05:09.654686611Z" level=error msg="RemoveContainer for \"1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220\" failed" error="failed to set removing state for container \"1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220\": container is already in removing state" Oct 2 20:05:09.655650 kubelet[1928]: E1002 20:05:09.655588 1928 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220\": container is already in removing state" containerID="1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220" Oct 2 20:05:09.655813 kubelet[1928]: E1002 20:05:09.655712 1928 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220": container is already in removing state; Skipping pod "cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)" Oct 2 20:05:09.657024 kubelet[1928]: E1002 20:05:09.656464 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:05:09.707619 env[1054]: time="2023-10-02T20:05:09.707478348Z" level=info msg="RemoveContainer for \"1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220\" returns successfully" Oct 2 20:05:09.801653 systemd[1]: run-containerd-runc-k8s.io-79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11-runc.HvUAno.mount: Deactivated successfully. Oct 2 20:05:09.802077 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11-rootfs.mount: Deactivated successfully. Oct 2 20:05:10.635960 kubelet[1928]: E1002 20:05:10.633936 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:05:10.795627 kubelet[1928]: W1002 20:05:10.795540 1928 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode24771d0_6a77_4c0d_80f7_a46444268524.slice/cri-containerd-1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220.scope WatchSource:0}: container "1ffe7051c84462fae033d13fd3c43389d9e9ecb4adcc7a066aeac4430c452220" in namespace "k8s.io": not found Oct 2 20:05:11.617480 env[1054]: time="2023-10-02T20:05:11.617411292Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:05:11.624098 env[1054]: time="2023-10-02T20:05:11.624013259Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:05:11.628896 env[1054]: time="2023-10-02T20:05:11.628840198Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:05:11.632249 env[1054]: time="2023-10-02T20:05:11.630877739Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 20:05:11.636079 env[1054]: time="2023-10-02T20:05:11.635850671Z" level=info msg="CreateContainer within sandbox \"1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 20:05:11.652620 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1817036523.mount: Deactivated successfully. Oct 2 20:05:11.660229 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount228101626.mount: Deactivated successfully. Oct 2 20:05:11.666215 env[1054]: time="2023-10-02T20:05:11.666140157Z" level=info msg="CreateContainer within sandbox \"1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d\"" Oct 2 20:05:11.667508 env[1054]: time="2023-10-02T20:05:11.667452868Z" level=info msg="StartContainer for \"2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d\"" Oct 2 20:05:11.697756 systemd[1]: Started cri-containerd-2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d.scope. Oct 2 20:05:11.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.763117 kernel: kauditd_printk_skb: 41 callbacks suppressed Oct 2 20:05:11.763236 kernel: audit: type=1400 audit(1696277111.759:1074): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.787197 kernel: audit: type=1400 audit(1696277111.759:1075): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.787423 kernel: audit: type=1400 audit(1696277111.762:1076): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.795856 kernel: audit: type=1400 audit(1696277111.762:1077): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.811028 kernel: audit: type=1400 audit(1696277111.762:1078): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.811264 kernel: audit: type=1400 audit(1696277111.762:1079): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.817950 kernel: audit: type=1400 audit(1696277111.762:1080): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.818206 kernel: audit: type=1400 audit(1696277111.762:1081): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.825286 kernel: audit: type=1400 audit(1696277111.762:1082): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.826211 kernel: audit: type=1400 audit(1696277111.769:1083): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.769000 audit: BPF prog-id=124 op=LOAD Oct 2 20:05:11.771000 audit[2356]: AVC avc: denied { bpf } for pid=2356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.771000 audit[2356]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2087 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:11.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263373936623434653161376535373164343434333435636238633633 Oct 2 20:05:11.771000 audit[2356]: AVC avc: denied { perfmon } for pid=2356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.771000 audit[2356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2087 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:11.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263373936623434653161376535373164343434333435636238633633 Oct 2 20:05:11.771000 audit[2356]: AVC avc: denied { bpf } for pid=2356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.771000 audit[2356]: AVC avc: denied { bpf } for pid=2356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.771000 audit[2356]: AVC avc: denied { bpf } for pid=2356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.771000 audit[2356]: AVC avc: denied { perfmon } for pid=2356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.771000 audit[2356]: AVC avc: denied { perfmon } for pid=2356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.771000 audit[2356]: AVC avc: denied { perfmon } for pid=2356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.771000 audit[2356]: AVC avc: denied { perfmon } for pid=2356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.771000 audit[2356]: AVC avc: denied { perfmon } for pid=2356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.771000 audit[2356]: AVC avc: denied { bpf } for pid=2356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.771000 audit[2356]: AVC avc: denied { bpf } for pid=2356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.771000 audit: BPF prog-id=125 op=LOAD Oct 2 20:05:11.771000 audit[2356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003ae090 items=0 ppid=2087 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:11.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263373936623434653161376535373164343434333435636238633633 Oct 2 20:05:11.790000 audit[2356]: AVC avc: denied { bpf } for pid=2356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.790000 audit[2356]: AVC avc: denied { bpf } for pid=2356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.790000 audit[2356]: AVC avc: denied { perfmon } for pid=2356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.790000 audit[2356]: AVC avc: denied { perfmon } for pid=2356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.790000 audit[2356]: AVC avc: denied { perfmon } for pid=2356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.790000 audit[2356]: AVC avc: denied { perfmon } for pid=2356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.790000 audit[2356]: AVC avc: denied { perfmon } for pid=2356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.790000 audit[2356]: AVC avc: denied { bpf } for pid=2356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.790000 audit[2356]: AVC avc: denied { bpf } for pid=2356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.790000 audit: BPF prog-id=126 op=LOAD Oct 2 20:05:11.790000 audit[2356]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002ae368 items=0 ppid=2087 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:11.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263373936623434653161376535373164343434333435636238633633 Oct 2 20:05:11.803000 audit: BPF prog-id=126 op=UNLOAD Oct 2 20:05:11.803000 audit: BPF prog-id=125 op=UNLOAD Oct 2 20:05:11.803000 audit[2356]: AVC avc: denied { bpf } for pid=2356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.803000 audit[2356]: AVC avc: denied { bpf } for pid=2356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.803000 audit[2356]: AVC avc: denied { bpf } for pid=2356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.803000 audit[2356]: AVC avc: denied { perfmon } for pid=2356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.803000 audit[2356]: AVC avc: denied { perfmon } for pid=2356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.803000 audit[2356]: AVC avc: denied { perfmon } for pid=2356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.803000 audit[2356]: AVC avc: denied { perfmon } for pid=2356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.803000 audit[2356]: AVC avc: denied { perfmon } for pid=2356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.803000 audit[2356]: AVC avc: denied { bpf } for pid=2356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.803000 audit[2356]: AVC avc: denied { bpf } for pid=2356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:11.803000 audit: BPF prog-id=127 op=LOAD Oct 2 20:05:11.803000 audit[2356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002ae778 items=0 ppid=2087 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:11.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263373936623434653161376535373164343434333435636238633633 Oct 2 20:05:11.878445 env[1054]: time="2023-10-02T20:05:11.878219158Z" level=info msg="StartContainer for \"2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d\" returns successfully" Oct 2 20:05:11.887000 audit[2367]: AVC avc: denied { map_create } for pid=2367 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c771 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c771 tclass=bpf permissive=0 Oct 2 20:05:11.887000 audit[2367]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c0006277d0 a2=48 a3=0 items=0 ppid=2087 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c654,c771 key=(null) Oct 2 20:05:11.887000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 20:05:12.844812 kubelet[1928]: I1002 20:05:12.844756 1928 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-9qs87" podStartSLOduration=2.112553266 podCreationTimestamp="2023-10-02 20:04:54 +0000 UTC" firstStartedPulling="2023-10-02 20:04:54.900747196 +0000 UTC m=+12.663409923" lastFinishedPulling="2023-10-02 20:05:11.632862389 +0000 UTC m=+29.395525116" observedRunningTime="2023-10-02 20:05:12.839173787 +0000 UTC m=+30.601836524" watchObservedRunningTime="2023-10-02 20:05:12.844668459 +0000 UTC m=+30.607331297" Oct 2 20:05:13.906593 kubelet[1928]: W1002 20:05:13.906530 1928 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode24771d0_6a77_4c0d_80f7_a46444268524.slice/cri-containerd-79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11.scope WatchSource:0}: task 79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11 not found: not found Oct 2 20:05:24.426420 env[1054]: time="2023-10-02T20:05:24.426280265Z" level=info msg="CreateContainer within sandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:05:24.470788 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1870130558.mount: Deactivated successfully. Oct 2 20:05:24.494584 env[1054]: time="2023-10-02T20:05:24.494392326Z" level=info msg="CreateContainer within sandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a\"" Oct 2 20:05:24.496808 env[1054]: time="2023-10-02T20:05:24.496740232Z" level=info msg="StartContainer for \"577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a\"" Oct 2 20:05:24.549962 systemd[1]: Started cri-containerd-577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a.scope. Oct 2 20:05:24.567939 systemd[1]: cri-containerd-577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a.scope: Deactivated successfully. Oct 2 20:05:24.591608 env[1054]: time="2023-10-02T20:05:24.591519924Z" level=info msg="shim disconnected" id=577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a Oct 2 20:05:24.591848 env[1054]: time="2023-10-02T20:05:24.591616005Z" level=warning msg="cleaning up after shim disconnected" id=577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a namespace=k8s.io Oct 2 20:05:24.591848 env[1054]: time="2023-10-02T20:05:24.591636366Z" level=info msg="cleaning up dead shim" Oct 2 20:05:24.601293 env[1054]: time="2023-10-02T20:05:24.601203046Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:05:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2413 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:05:24Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:05:24.601904 env[1054]: time="2023-10-02T20:05:24.601818195Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 20:05:24.602263 env[1054]: time="2023-10-02T20:05:24.602194848Z" level=error msg="Failed to pipe stdout of container \"577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a\"" error="reading from a closed fifo" Oct 2 20:05:24.602414 env[1054]: time="2023-10-02T20:05:24.602372888Z" level=error msg="Failed to pipe stderr of container \"577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a\"" error="reading from a closed fifo" Oct 2 20:05:24.605342 env[1054]: time="2023-10-02T20:05:24.605290881Z" level=error msg="StartContainer for \"577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:05:24.606137 kubelet[1928]: E1002 20:05:24.605761 1928 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a" Oct 2 20:05:24.606137 kubelet[1928]: E1002 20:05:24.606024 1928 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:05:24.606137 kubelet[1928]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:05:24.606137 kubelet[1928]: rm /hostbin/cilium-mount Oct 2 20:05:24.606137 kubelet[1928]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gwbcr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:05:24.606137 kubelet[1928]: E1002 20:05:24.606096 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:05:24.693080 kubelet[1928]: I1002 20:05:24.692201 1928 scope.go:115] "RemoveContainer" containerID="79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11" Oct 2 20:05:24.693797 kubelet[1928]: I1002 20:05:24.693781 1928 scope.go:115] "RemoveContainer" containerID="79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11" Oct 2 20:05:24.709116 env[1054]: time="2023-10-02T20:05:24.709073625Z" level=info msg="RemoveContainer for \"79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11\"" Oct 2 20:05:24.709755 env[1054]: time="2023-10-02T20:05:24.709063950Z" level=info msg="RemoveContainer for \"79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11\"" Oct 2 20:05:24.709987 env[1054]: time="2023-10-02T20:05:24.709949454Z" level=error msg="RemoveContainer for \"79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11\" failed" error="failed to set removing state for container \"79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11\": container is already in removing state" Oct 2 20:05:24.710232 kubelet[1928]: E1002 20:05:24.710213 1928 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11\": container is already in removing state" containerID="79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11" Oct 2 20:05:24.710361 kubelet[1928]: I1002 20:05:24.710350 1928 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11} err="rpc error: code = Unknown desc = failed to set removing state for container \"79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11\": container is already in removing state" Oct 2 20:05:24.724995 env[1054]: time="2023-10-02T20:05:24.724849059Z" level=info msg="RemoveContainer for \"79b3b25ea8252a910e202f6c5277e30c4ec7653cc512c5bab384c81cb7abff11\" returns successfully" Oct 2 20:05:24.727109 kubelet[1928]: E1002 20:05:24.727017 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:05:25.462399 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a-rootfs.mount: Deactivated successfully. Oct 2 20:05:27.701889 kubelet[1928]: W1002 20:05:27.701789 1928 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode24771d0_6a77_4c0d_80f7_a46444268524.slice/cri-containerd-577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a.scope WatchSource:0}: task 577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a not found: not found Oct 2 20:05:35.419745 kubelet[1928]: E1002 20:05:35.419630 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:05:35.986000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:35.990055 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 20:05:35.990351 kernel: audit: type=1400 audit(1696277135.986:1093): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:35.986000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0010ed8c0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:05:35.986000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:05:36.024634 kernel: audit: type=1300 audit(1696277135.986:1093): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0010ed8c0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:05:36.024814 kernel: audit: type=1327 audit(1696277135.986:1093): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:05:36.024882 kernel: audit: type=1400 audit(1696277135.986:1094): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:35.986000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:35.986000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6c150 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:05:35.986000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:05:36.060126 kernel: audit: type=1300 audit(1696277135.986:1094): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6c150 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:05:36.060275 kernel: audit: type=1327 audit(1696277135.986:1094): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:05:38.251000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:38.263411 kernel: audit: type=1400 audit(1696277138.251:1095): avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:38.263491 kernel: audit: type=1400 audit(1696277138.251:1096): avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:38.251000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:38.251000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00314b140 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:05:38.286997 kernel: audit: type=1300 audit(1696277138.251:1096): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00314b140 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:05:38.251000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:05:38.253000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525367 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:38.253000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00314b260 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:05:38.253000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:05:38.254000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:38.254000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0031df680 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:05:38.300074 kernel: audit: type=1327 audit(1696277138.251:1096): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:05:38.254000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:05:38.251000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c008739680 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:05:38.251000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:05:38.337000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:38.337000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:38.337000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00314b7a0 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:05:38.337000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0087397a0 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:05:38.337000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:05:38.337000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:05:50.425979 env[1054]: time="2023-10-02T20:05:50.425611215Z" level=info msg="CreateContainer within sandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:05:50.453273 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1687878289.mount: Deactivated successfully. Oct 2 20:05:50.468869 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1543420568.mount: Deactivated successfully. Oct 2 20:05:50.478617 env[1054]: time="2023-10-02T20:05:50.478529364Z" level=info msg="CreateContainer within sandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3\"" Oct 2 20:05:50.480456 env[1054]: time="2023-10-02T20:05:50.480403802Z" level=info msg="StartContainer for \"249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3\"" Oct 2 20:05:50.533547 systemd[1]: Started cri-containerd-249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3.scope. Oct 2 20:05:50.548125 systemd[1]: cri-containerd-249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3.scope: Deactivated successfully. Oct 2 20:05:50.573785 env[1054]: time="2023-10-02T20:05:50.573727666Z" level=info msg="shim disconnected" id=249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3 Oct 2 20:05:50.574098 env[1054]: time="2023-10-02T20:05:50.574079532Z" level=warning msg="cleaning up after shim disconnected" id=249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3 namespace=k8s.io Oct 2 20:05:50.574184 env[1054]: time="2023-10-02T20:05:50.574170358Z" level=info msg="cleaning up dead shim" Oct 2 20:05:50.583982 env[1054]: time="2023-10-02T20:05:50.583885787Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:05:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2456 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:05:50Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:05:50.584281 env[1054]: time="2023-10-02T20:05:50.584210366Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 20:05:50.584753 env[1054]: time="2023-10-02T20:05:50.584634497Z" level=error msg="Failed to pipe stderr of container \"249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3\"" error="reading from a closed fifo" Oct 2 20:05:50.584860 env[1054]: time="2023-10-02T20:05:50.584722638Z" level=error msg="Failed to pipe stdout of container \"249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3\"" error="reading from a closed fifo" Oct 2 20:05:50.629888 env[1054]: time="2023-10-02T20:05:50.629758476Z" level=error msg="StartContainer for \"249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:05:50.630554 kubelet[1928]: E1002 20:05:50.630473 1928 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3" Oct 2 20:05:50.631184 kubelet[1928]: E1002 20:05:50.630706 1928 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:05:50.631184 kubelet[1928]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:05:50.631184 kubelet[1928]: rm /hostbin/cilium-mount Oct 2 20:05:50.631184 kubelet[1928]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gwbcr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:05:50.631184 kubelet[1928]: E1002 20:05:50.630797 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:05:50.793734 kubelet[1928]: I1002 20:05:50.793555 1928 scope.go:115] "RemoveContainer" containerID="577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a" Oct 2 20:05:50.799798 kubelet[1928]: I1002 20:05:50.799726 1928 scope.go:115] "RemoveContainer" containerID="577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a" Oct 2 20:05:50.806086 env[1054]: time="2023-10-02T20:05:50.804677009Z" level=info msg="RemoveContainer for \"577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a\"" Oct 2 20:05:50.807759 env[1054]: time="2023-10-02T20:05:50.806983801Z" level=info msg="RemoveContainer for \"577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a\"" Oct 2 20:05:50.807759 env[1054]: time="2023-10-02T20:05:50.807149546Z" level=error msg="RemoveContainer for \"577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a\" failed" error="failed to set removing state for container \"577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a\": container is already in removing state" Oct 2 20:05:50.808059 kubelet[1928]: E1002 20:05:50.807865 1928 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a\": container is already in removing state" containerID="577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a" Oct 2 20:05:50.808059 kubelet[1928]: I1002 20:05:50.807975 1928 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a} err="rpc error: code = Unknown desc = failed to set removing state for container \"577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a\": container is already in removing state" Oct 2 20:05:50.816634 env[1054]: time="2023-10-02T20:05:50.816501469Z" level=info msg="RemoveContainer for \"577964535ee9d5575bb61a17a57385a3b0b0246f3f540539b2ded62d82d0916a\" returns successfully" Oct 2 20:05:50.818737 kubelet[1928]: E1002 20:05:50.818682 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:05:50.918000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:50.921534 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:05:50.921759 kernel: audit: type=1400 audit(1696277150.918:1101): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:50.918000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e3ef40 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:05:50.948400 kernel: audit: type=1300 audit(1696277150.918:1101): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e3ef40 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:05:50.948636 kernel: audit: type=1327 audit(1696277150.918:1101): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:05:50.918000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:05:50.921000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:50.921000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001141cc0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:05:50.984307 kernel: audit: type=1400 audit(1696277150.921:1102): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:50.984558 kernel: audit: type=1300 audit(1696277150.921:1102): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001141cc0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:05:50.921000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:05:50.921000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:51.006385 kernel: audit: type=1327 audit(1696277150.921:1102): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:05:51.006548 kernel: audit: type=1400 audit(1696277150.921:1103): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:50.921000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001141ee0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:05:50.921000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:05:51.020570 kernel: audit: type=1300 audit(1696277150.921:1103): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001141ee0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:05:51.020728 kernel: audit: type=1327 audit(1696277150.921:1103): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:05:51.020792 kernel: audit: type=1400 audit(1696277150.926:1104): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:50.926000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:05:50.926000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0011f8000 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:05:50.926000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:05:51.445332 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3-rootfs.mount: Deactivated successfully. Oct 2 20:05:53.684140 kubelet[1928]: W1002 20:05:53.684049 1928 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode24771d0_6a77_4c0d_80f7_a46444268524.slice/cri-containerd-249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3.scope WatchSource:0}: task 249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3 not found: not found Oct 2 20:05:57.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.251:22-172.24.4.1:33490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:57.865785 systemd[1]: Started sshd@7-172.24.4.251:22-172.24.4.1:33490.service. Oct 2 20:05:57.869218 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:05:57.869338 kernel: audit: type=1130 audit(1696277157.865:1105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.251:22-172.24.4.1:33490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:58.969000 audit[2472]: USER_ACCT pid=2472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:05:58.972963 sshd[2472]: Accepted publickey for core from 172.24.4.1 port 33490 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:05:58.981987 kernel: audit: type=1101 audit(1696277158.969:1106): pid=2472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:05:58.981000 audit[2472]: CRED_ACQ pid=2472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:05:58.984275 sshd[2472]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:58.993271 kernel: audit: type=1103 audit(1696277158.981:1107): pid=2472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:05:59.000991 kernel: audit: type=1006 audit(1696277158.981:1108): pid=2472 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 20:05:58.981000 audit[2472]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbb757350 a2=3 a3=0 items=0 ppid=1 pid=2472 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:59.015270 kernel: audit: type=1300 audit(1696277158.981:1108): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbb757350 a2=3 a3=0 items=0 ppid=1 pid=2472 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:58.981000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:05:59.020043 kernel: audit: type=1327 audit(1696277158.981:1108): proctitle=737368643A20636F7265205B707269765D Oct 2 20:05:59.025572 systemd-logind[1043]: New session 8 of user core. Oct 2 20:05:59.027897 systemd[1]: Started session-8.scope. Oct 2 20:05:59.048000 audit[2472]: USER_START pid=2472 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:05:59.066160 kernel: audit: type=1105 audit(1696277159.048:1109): pid=2472 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:05:59.064000 audit[2474]: CRED_ACQ pid=2474 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:05:59.073954 kernel: audit: type=1103 audit(1696277159.064:1110): pid=2474 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:00.016336 sshd[2472]: pam_unix(sshd:session): session closed for user core Oct 2 20:06:00.018000 audit[2472]: USER_END pid=2472 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:00.031965 kernel: audit: type=1106 audit(1696277160.018:1111): pid=2472 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:00.032975 systemd[1]: sshd@7-172.24.4.251:22-172.24.4.1:33490.service: Deactivated successfully. Oct 2 20:06:00.034623 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 20:06:00.018000 audit[2472]: CRED_DISP pid=2472 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:00.037636 systemd-logind[1043]: Session 8 logged out. Waiting for processes to exit. Oct 2 20:06:00.050708 kernel: audit: type=1104 audit(1696277160.018:1112): pid=2472 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:00.031000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.251:22-172.24.4.1:33490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:00.052826 systemd-logind[1043]: Removed session 8. Oct 2 20:06:01.419127 kubelet[1928]: E1002 20:06:01.419058 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:06:10.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.251:22-172.24.4.1:40372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:10.029582 systemd[1]: Started sshd@8-172.24.4.251:22-172.24.4.1:40372.service. Oct 2 20:06:10.033970 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:06:10.034088 kernel: audit: type=1130 audit(1696277170.028:1114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.251:22-172.24.4.1:40372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:11.379000 audit[2484]: USER_ACCT pid=2484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:11.382688 sshd[2484]: Accepted publickey for core from 172.24.4.1 port 40372 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:06:11.390000 audit[2484]: CRED_ACQ pid=2484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:11.392436 sshd[2484]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:06:11.402529 kernel: audit: type=1101 audit(1696277171.379:1115): pid=2484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:11.402725 kernel: audit: type=1103 audit(1696277171.390:1116): pid=2484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:11.403556 kernel: audit: type=1006 audit(1696277171.390:1117): pid=2484 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 20:06:11.390000 audit[2484]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec74e25f0 a2=3 a3=0 items=0 ppid=1 pid=2484 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:11.423043 kernel: audit: type=1300 audit(1696277171.390:1117): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec74e25f0 a2=3 a3=0 items=0 ppid=1 pid=2484 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:11.390000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:06:11.435650 kernel: audit: type=1327 audit(1696277171.390:1117): proctitle=737368643A20636F7265205B707269765D Oct 2 20:06:11.434000 systemd-logind[1043]: New session 9 of user core. Oct 2 20:06:11.434670 systemd[1]: Started session-9.scope. Oct 2 20:06:11.452000 audit[2484]: USER_START pid=2484 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:11.466012 kernel: audit: type=1105 audit(1696277171.452:1118): pid=2484 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:11.466273 kernel: audit: type=1103 audit(1696277171.456:1119): pid=2486 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:11.456000 audit[2486]: CRED_ACQ pid=2486 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:12.092240 sshd[2484]: pam_unix(sshd:session): session closed for user core Oct 2 20:06:12.093000 audit[2484]: USER_END pid=2484 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:12.097905 systemd[1]: sshd@8-172.24.4.251:22-172.24.4.1:40372.service: Deactivated successfully. Oct 2 20:06:12.099468 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 20:06:12.102367 systemd-logind[1043]: Session 9 logged out. Waiting for processes to exit. Oct 2 20:06:12.104336 systemd-logind[1043]: Removed session 9. Oct 2 20:06:12.109208 kernel: audit: type=1106 audit(1696277172.093:1120): pid=2484 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:12.109326 kernel: audit: type=1104 audit(1696277172.093:1121): pid=2484 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:12.093000 audit[2484]: CRED_DISP pid=2484 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:12.093000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.251:22-172.24.4.1:40372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:16.421019 kubelet[1928]: E1002 20:06:16.420899 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:06:22.104874 systemd[1]: Started sshd@9-172.24.4.251:22-172.24.4.1:57026.service. Oct 2 20:06:22.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.251:22-172.24.4.1:57026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:22.111165 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:06:22.111370 kernel: audit: type=1130 audit(1696277182.104:1123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.251:22-172.24.4.1:57026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:23.386000 audit[2497]: USER_ACCT pid=2497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:23.388493 sshd[2497]: Accepted publickey for core from 172.24.4.1 port 57026 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:06:23.403473 kernel: audit: type=1101 audit(1696277183.386:1124): pid=2497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:23.408372 sshd[2497]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:06:23.405000 audit[2497]: CRED_ACQ pid=2497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:23.427155 kernel: audit: type=1103 audit(1696277183.405:1125): pid=2497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:23.427420 kernel: audit: type=1006 audit(1696277183.406:1126): pid=2497 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 20:06:23.406000 audit[2497]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffff4d9a090 a2=3 a3=0 items=0 ppid=1 pid=2497 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:23.435221 systemd-logind[1043]: New session 10 of user core. Oct 2 20:06:23.439180 systemd[1]: Started session-10.scope. Oct 2 20:06:23.445350 kernel: audit: type=1300 audit(1696277183.406:1126): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffff4d9a090 a2=3 a3=0 items=0 ppid=1 pid=2497 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:23.445488 kernel: audit: type=1327 audit(1696277183.406:1126): proctitle=737368643A20636F7265205B707269765D Oct 2 20:06:23.406000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:06:23.458000 audit[2497]: USER_START pid=2497 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:23.473836 kernel: audit: type=1105 audit(1696277183.458:1127): pid=2497 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:23.474142 kernel: audit: type=1103 audit(1696277183.472:1128): pid=2499 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:23.472000 audit[2499]: CRED_ACQ pid=2499 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:24.208432 sshd[2497]: pam_unix(sshd:session): session closed for user core Oct 2 20:06:24.210000 audit[2497]: USER_END pid=2497 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:24.230304 kernel: audit: type=1106 audit(1696277184.210:1129): pid=2497 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:24.230537 kernel: audit: type=1104 audit(1696277184.210:1130): pid=2497 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:24.210000 audit[2497]: CRED_DISP pid=2497 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:24.227735 systemd[1]: sshd@9-172.24.4.251:22-172.24.4.1:57026.service: Deactivated successfully. Oct 2 20:06:24.229721 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 20:06:24.241595 systemd-logind[1043]: Session 10 logged out. Waiting for processes to exit. Oct 2 20:06:24.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.251:22-172.24.4.1:57026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:24.244737 systemd-logind[1043]: Removed session 10. Oct 2 20:06:30.420334 kubelet[1928]: E1002 20:06:30.420241 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:06:34.224729 systemd[1]: Started sshd@10-172.24.4.251:22-172.24.4.1:36194.service. Oct 2 20:06:34.225000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.251:22-172.24.4.1:36194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:34.229357 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:06:34.229550 kernel: audit: type=1130 audit(1696277194.225:1132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.251:22-172.24.4.1:36194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:35.388000 audit[2512]: USER_ACCT pid=2512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:35.391601 sshd[2512]: Accepted publickey for core from 172.24.4.1 port 36194 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:06:35.401998 kernel: audit: type=1101 audit(1696277195.388:1133): pid=2512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:35.400000 audit[2512]: CRED_ACQ pid=2512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:35.413277 kernel: audit: type=1103 audit(1696277195.400:1134): pid=2512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:35.402328 sshd[2512]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:06:35.424767 systemd[1]: Started session-11.scope. Oct 2 20:06:35.426141 systemd-logind[1043]: New session 11 of user core. Oct 2 20:06:35.436019 kernel: audit: type=1006 audit(1696277195.400:1135): pid=2512 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 20:06:35.400000 audit[2512]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd408de010 a2=3 a3=0 items=0 ppid=1 pid=2512 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:35.449174 kernel: audit: type=1300 audit(1696277195.400:1135): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd408de010 a2=3 a3=0 items=0 ppid=1 pid=2512 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:35.400000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:06:35.453967 kernel: audit: type=1327 audit(1696277195.400:1135): proctitle=737368643A20636F7265205B707269765D Oct 2 20:06:35.458000 audit[2512]: USER_START pid=2512 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:35.470000 audit[2514]: CRED_ACQ pid=2514 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:35.481258 kernel: audit: type=1105 audit(1696277195.458:1136): pid=2512 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:35.481319 kernel: audit: type=1103 audit(1696277195.470:1137): pid=2514 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:35.990000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:35.990000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00136a460 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:06:36.016458 kernel: audit: type=1400 audit(1696277195.990:1138): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:36.016603 kernel: audit: type=1300 audit(1696277195.990:1138): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00136a460 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:06:35.990000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:35.991000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:35.991000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0022ccea0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:06:35.991000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:36.131531 sshd[2512]: pam_unix(sshd:session): session closed for user core Oct 2 20:06:36.132000 audit[2512]: USER_END pid=2512 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:36.133000 audit[2512]: CRED_DISP pid=2512 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:36.139004 systemd[1]: sshd@10-172.24.4.251:22-172.24.4.1:36194.service: Deactivated successfully. Oct 2 20:06:36.138000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.251:22-172.24.4.1:36194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:36.141496 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 20:06:36.145438 systemd-logind[1043]: Session 11 logged out. Waiting for processes to exit. Oct 2 20:06:36.148374 systemd-logind[1043]: Removed session 11. Oct 2 20:06:38.253000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:38.253000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0030e8e70 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:06:38.253000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:06:38.253000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525367 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:38.253000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0030e8ea0 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:06:38.253000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:06:38.255000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:38.255000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0030e9200 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:06:38.255000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:06:38.258000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:38.258000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00805aa00 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:06:38.258000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:06:38.338000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:38.338000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c003540600 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:06:38.338000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:06:38.339000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:38.339000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00805aa60 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:06:38.339000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:06:42.503411 kubelet[1928]: E1002 20:06:42.503146 1928 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 20:06:42.595843 kubelet[1928]: E1002 20:06:42.595796 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:06:44.429595 env[1054]: time="2023-10-02T20:06:44.429344741Z" level=info msg="CreateContainer within sandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 20:06:44.457160 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3160514564.mount: Deactivated successfully. Oct 2 20:06:44.470220 env[1054]: time="2023-10-02T20:06:44.470106405Z" level=info msg="CreateContainer within sandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712\"" Oct 2 20:06:44.472226 env[1054]: time="2023-10-02T20:06:44.472130281Z" level=info msg="StartContainer for \"82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712\"" Oct 2 20:06:44.542059 systemd[1]: Started cri-containerd-82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712.scope. Oct 2 20:06:44.556648 systemd[1]: cri-containerd-82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712.scope: Deactivated successfully. Oct 2 20:06:44.572790 env[1054]: time="2023-10-02T20:06:44.572719330Z" level=info msg="shim disconnected" id=82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712 Oct 2 20:06:44.572790 env[1054]: time="2023-10-02T20:06:44.572777745Z" level=warning msg="cleaning up after shim disconnected" id=82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712 namespace=k8s.io Oct 2 20:06:44.572790 env[1054]: time="2023-10-02T20:06:44.572792863Z" level=info msg="cleaning up dead shim" Oct 2 20:06:44.582878 env[1054]: time="2023-10-02T20:06:44.582784941Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:06:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2550 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:06:44Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:06:44.583223 env[1054]: time="2023-10-02T20:06:44.583151578Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 20:06:44.583445 env[1054]: time="2023-10-02T20:06:44.583398215Z" level=error msg="Failed to pipe stdout of container \"82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712\"" error="reading from a closed fifo" Oct 2 20:06:44.583519 env[1054]: time="2023-10-02T20:06:44.583484502Z" level=error msg="Failed to pipe stderr of container \"82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712\"" error="reading from a closed fifo" Oct 2 20:06:44.586542 env[1054]: time="2023-10-02T20:06:44.586487757Z" level=error msg="StartContainer for \"82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:06:44.587949 kubelet[1928]: E1002 20:06:44.586830 1928 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712" Oct 2 20:06:44.587949 kubelet[1928]: E1002 20:06:44.587006 1928 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:06:44.587949 kubelet[1928]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:06:44.587949 kubelet[1928]: rm /hostbin/cilium-mount Oct 2 20:06:44.587949 kubelet[1928]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gwbcr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:06:44.587949 kubelet[1928]: E1002 20:06:44.587054 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:06:44.991526 kubelet[1928]: I1002 20:06:44.991447 1928 scope.go:115] "RemoveContainer" containerID="249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3" Oct 2 20:06:44.993974 env[1054]: time="2023-10-02T20:06:44.993862274Z" level=info msg="RemoveContainer for \"249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3\"" Oct 2 20:06:44.994244 kubelet[1928]: I1002 20:06:44.993984 1928 scope.go:115] "RemoveContainer" containerID="249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3" Oct 2 20:06:45.007437 env[1054]: time="2023-10-02T20:06:45.007328567Z" level=info msg="RemoveContainer for \"249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3\" returns successfully" Oct 2 20:06:45.007963 env[1054]: time="2023-10-02T20:06:45.007338765Z" level=error msg="ContainerStatus for \"249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3\": not found" Oct 2 20:06:45.009276 kubelet[1928]: E1002 20:06:45.009244 1928 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3\": not found" containerID="249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3" Oct 2 20:06:45.009651 kubelet[1928]: E1002 20:06:45.009623 1928 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": failed to get container status "249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3": rpc error: code = NotFound desc = an error occurred when try to find container "249eef90ee67c8b47284f7dee9b59ae1bd33825fcb367fb73d2583773bc2fdd3": not found; Skipping pod "cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)" Oct 2 20:06:45.014383 kubelet[1928]: E1002 20:06:45.014348 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:06:45.450335 systemd[1]: run-containerd-runc-k8s.io-82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712-runc.lGzTHu.mount: Deactivated successfully. Oct 2 20:06:45.450578 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712-rootfs.mount: Deactivated successfully. Oct 2 20:06:46.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.251:22-172.24.4.1:52928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:46.139293 systemd[1]: Started sshd@11-172.24.4.251:22-172.24.4.1:52928.service. Oct 2 20:06:46.143420 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:06:46.143554 kernel: audit: type=1130 audit(1696277206.138:1149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.251:22-172.24.4.1:52928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:47.364000 audit[2564]: USER_ACCT pid=2564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:47.377395 sshd[2564]: Accepted publickey for core from 172.24.4.1 port 52928 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:06:47.378060 kernel: audit: type=1101 audit(1696277207.364:1150): pid=2564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:47.376000 audit[2564]: CRED_ACQ pid=2564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:47.379258 sshd[2564]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:06:47.392555 kernel: audit: type=1103 audit(1696277207.376:1151): pid=2564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:47.392763 kernel: audit: type=1006 audit(1696277207.376:1152): pid=2564 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 20:06:47.376000 audit[2564]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd14206ff0 a2=3 a3=0 items=0 ppid=1 pid=2564 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:47.408449 kernel: audit: type=1300 audit(1696277207.376:1152): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd14206ff0 a2=3 a3=0 items=0 ppid=1 pid=2564 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:47.376000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:06:47.417457 systemd-logind[1043]: New session 12 of user core. Oct 2 20:06:47.420951 systemd[1]: Started session-12.scope. Oct 2 20:06:47.423985 kernel: audit: type=1327 audit(1696277207.376:1152): proctitle=737368643A20636F7265205B707269765D Oct 2 20:06:47.435000 audit[2564]: USER_START pid=2564 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:47.449056 kernel: audit: type=1105 audit(1696277207.435:1153): pid=2564 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:47.450319 kernel: audit: type=1103 audit(1696277207.448:1154): pid=2566 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:47.448000 audit[2566]: CRED_ACQ pid=2566 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:47.597990 kubelet[1928]: E1002 20:06:47.597889 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:06:47.681354 kubelet[1928]: W1002 20:06:47.681257 1928 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode24771d0_6a77_4c0d_80f7_a46444268524.slice/cri-containerd-82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712.scope WatchSource:0}: task 82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712 not found: not found Oct 2 20:06:48.078051 sshd[2564]: pam_unix(sshd:session): session closed for user core Oct 2 20:06:48.079000 audit[2564]: USER_END pid=2564 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:48.097943 kernel: audit: type=1106 audit(1696277208.079:1155): pid=2564 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:48.098184 kernel: audit: type=1104 audit(1696277208.080:1156): pid=2564 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:48.080000 audit[2564]: CRED_DISP pid=2564 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:48.094300 systemd[1]: sshd@11-172.24.4.251:22-172.24.4.1:52928.service: Deactivated successfully. Oct 2 20:06:48.096304 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 20:06:48.093000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.251:22-172.24.4.1:52928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:48.105261 systemd-logind[1043]: Session 12 logged out. Waiting for processes to exit. Oct 2 20:06:48.107981 systemd-logind[1043]: Removed session 12. Oct 2 20:06:50.921000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:50.921000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001599ba0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:06:50.921000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:50.923000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:50.923000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001599cc0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:06:50.923000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:50.926000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:50.926000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001599de0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:06:50.926000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:50.931000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:50.931000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000df4080 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:06:50.931000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:52.601385 kubelet[1928]: E1002 20:06:52.601228 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:06:57.603592 kubelet[1928]: E1002 20:06:57.603496 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:06:58.088523 systemd[1]: Started sshd@12-172.24.4.251:22-172.24.4.1:41202.service. Oct 2 20:06:58.101858 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:06:58.102074 kernel: audit: type=1130 audit(1696277218.088:1162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.251:22-172.24.4.1:41202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:58.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.251:22-172.24.4.1:41202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:58.419680 kubelet[1928]: E1002 20:06:58.419592 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:06:59.366000 audit[2579]: USER_ACCT pid=2579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:59.379461 sshd[2579]: Accepted publickey for core from 172.24.4.1 port 41202 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:06:59.380080 kernel: audit: type=1101 audit(1696277219.366:1163): pid=2579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:59.378000 audit[2579]: CRED_ACQ pid=2579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:59.381122 sshd[2579]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:06:59.391014 kernel: audit: type=1103 audit(1696277219.378:1164): pid=2579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:59.397965 kernel: audit: type=1006 audit(1696277219.378:1165): pid=2579 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 20:06:59.378000 audit[2579]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2e3c6a30 a2=3 a3=0 items=0 ppid=1 pid=2579 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:59.409992 kernel: audit: type=1300 audit(1696277219.378:1165): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2e3c6a30 a2=3 a3=0 items=0 ppid=1 pid=2579 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:59.378000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:06:59.419973 kernel: audit: type=1327 audit(1696277219.378:1165): proctitle=737368643A20636F7265205B707269765D Oct 2 20:06:59.426125 systemd[1]: Started session-13.scope. Oct 2 20:06:59.426902 systemd-logind[1043]: New session 13 of user core. Oct 2 20:06:59.440000 audit[2579]: USER_START pid=2579 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:59.454321 kernel: audit: type=1105 audit(1696277219.440:1166): pid=2579 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:59.443000 audit[2581]: CRED_ACQ pid=2581 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:06:59.464993 kernel: audit: type=1103 audit(1696277219.443:1167): pid=2581 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:00.197572 sshd[2579]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:00.199000 audit[2579]: USER_END pid=2579 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:00.204563 systemd-logind[1043]: Session 13 logged out. Waiting for processes to exit. Oct 2 20:07:00.206242 systemd[1]: sshd@12-172.24.4.251:22-172.24.4.1:41202.service: Deactivated successfully. Oct 2 20:07:00.207767 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 20:07:00.210783 systemd-logind[1043]: Removed session 13. Oct 2 20:07:00.199000 audit[2579]: CRED_DISP pid=2579 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:00.222109 kernel: audit: type=1106 audit(1696277220.199:1168): pid=2579 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:00.222339 kernel: audit: type=1104 audit(1696277220.199:1169): pid=2579 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:00.205000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.251:22-172.24.4.1:41202 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:02.605204 kubelet[1928]: E1002 20:07:02.605161 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:07.607996 kubelet[1928]: E1002 20:07:07.607950 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:10.214662 systemd[1]: Started sshd@13-172.24.4.251:22-172.24.4.1:46536.service. Oct 2 20:07:10.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.251:22-172.24.4.1:46536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:10.220681 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:07:10.220822 kernel: audit: type=1130 audit(1696277230.216:1171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.251:22-172.24.4.1:46536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:10.419363 kubelet[1928]: E1002 20:07:10.418908 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:07:11.651798 sshd[2592]: Accepted publickey for core from 172.24.4.1 port 46536 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:07:11.650000 audit[2592]: USER_ACCT pid=2592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:11.663166 kernel: audit: type=1101 audit(1696277231.650:1172): pid=2592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:11.662000 audit[2592]: CRED_ACQ pid=2592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:11.673963 kernel: audit: type=1103 audit(1696277231.662:1173): pid=2592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:11.664075 sshd[2592]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:11.675044 systemd[1]: Started session-14.scope. Oct 2 20:07:11.678614 systemd-logind[1043]: New session 14 of user core. Oct 2 20:07:11.662000 audit[2592]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc56cd1850 a2=3 a3=0 items=0 ppid=1 pid=2592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:11.693326 kernel: audit: type=1006 audit(1696277231.662:1174): pid=2592 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 20:07:11.693435 kernel: audit: type=1300 audit(1696277231.662:1174): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc56cd1850 a2=3 a3=0 items=0 ppid=1 pid=2592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:11.696072 kernel: audit: type=1327 audit(1696277231.662:1174): proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:11.662000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:11.693000 audit[2592]: USER_START pid=2592 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:11.713989 kernel: audit: type=1105 audit(1696277231.693:1175): pid=2592 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:11.712000 audit[2594]: CRED_ACQ pid=2594 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:11.723986 kernel: audit: type=1103 audit(1696277231.712:1176): pid=2594 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:12.364770 sshd[2592]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:12.366000 audit[2592]: USER_END pid=2592 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:12.366000 audit[2592]: CRED_DISP pid=2592 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:12.381168 systemd-logind[1043]: Session 14 logged out. Waiting for processes to exit. Oct 2 20:07:12.384472 systemd[1]: sshd@13-172.24.4.251:22-172.24.4.1:46536.service: Deactivated successfully. Oct 2 20:07:12.386130 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 20:07:12.389136 kernel: audit: type=1106 audit(1696277232.366:1177): pid=2592 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:12.389270 kernel: audit: type=1104 audit(1696277232.366:1178): pid=2592 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:12.384000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.251:22-172.24.4.1:46536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:12.390677 systemd-logind[1043]: Removed session 14. Oct 2 20:07:12.610542 kubelet[1928]: E1002 20:07:12.610499 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:17.613352 kubelet[1928]: E1002 20:07:17.613296 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:22.381135 systemd[1]: Started sshd@14-172.24.4.251:22-172.24.4.1:60596.service. Oct 2 20:07:22.396308 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:07:22.396477 kernel: audit: type=1130 audit(1696277242.383:1180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.251:22-172.24.4.1:60596 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:22.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.251:22-172.24.4.1:60596 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:22.419649 kubelet[1928]: E1002 20:07:22.419469 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:07:22.615064 kubelet[1928]: E1002 20:07:22.615014 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:23.539000 audit[2606]: USER_ACCT pid=2606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:23.553750 kernel: audit: type=1101 audit(1696277243.539:1181): pid=2606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:23.553865 sshd[2606]: Accepted publickey for core from 172.24.4.1 port 60596 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:07:23.555440 sshd[2606]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:23.552000 audit[2606]: CRED_ACQ pid=2606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:23.568166 kernel: audit: type=1103 audit(1696277243.552:1182): pid=2606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:23.570196 systemd[1]: Started session-15.scope. Oct 2 20:07:23.577013 kernel: audit: type=1006 audit(1696277243.553:1183): pid=2606 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 20:07:23.572489 systemd-logind[1043]: New session 15 of user core. Oct 2 20:07:23.592128 kernel: audit: type=1300 audit(1696277243.553:1183): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc08435280 a2=3 a3=0 items=0 ppid=1 pid=2606 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:23.553000 audit[2606]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc08435280 a2=3 a3=0 items=0 ppid=1 pid=2606 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:23.553000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:23.598098 kernel: audit: type=1327 audit(1696277243.553:1183): proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:23.593000 audit[2606]: USER_START pid=2606 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:23.612093 kernel: audit: type=1105 audit(1696277243.593:1184): pid=2606 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:23.611000 audit[2608]: CRED_ACQ pid=2608 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:23.619088 kernel: audit: type=1103 audit(1696277243.611:1185): pid=2608 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:24.371519 sshd[2606]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:24.373000 audit[2606]: USER_END pid=2606 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:24.378561 systemd-logind[1043]: Session 15 logged out. Waiting for processes to exit. Oct 2 20:07:24.382111 systemd[1]: sshd@14-172.24.4.251:22-172.24.4.1:60596.service: Deactivated successfully. Oct 2 20:07:24.383705 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 20:07:24.373000 audit[2606]: CRED_DISP pid=2606 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:24.387532 systemd-logind[1043]: Removed session 15. Oct 2 20:07:24.396282 kernel: audit: type=1106 audit(1696277244.373:1186): pid=2606 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:24.396422 kernel: audit: type=1104 audit(1696277244.373:1187): pid=2606 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:24.379000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.251:22-172.24.4.1:60596 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:27.617306 kubelet[1928]: E1002 20:07:27.617265 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:32.620014 kubelet[1928]: E1002 20:07:32.619865 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:34.381000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.251:22-172.24.4.1:46182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:34.382523 systemd[1]: Started sshd@15-172.24.4.251:22-172.24.4.1:46182.service. Oct 2 20:07:34.395142 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:07:34.395315 kernel: audit: type=1130 audit(1696277254.381:1189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.251:22-172.24.4.1:46182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:34.420355 kubelet[1928]: E1002 20:07:34.420309 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:07:35.541000 audit[2621]: USER_ACCT pid=2621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:35.543311 sshd[2621]: Accepted publickey for core from 172.24.4.1 port 46182 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:07:35.553978 kernel: audit: type=1101 audit(1696277255.541:1190): pid=2621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:35.552000 audit[2621]: CRED_ACQ pid=2621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:35.555802 sshd[2621]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:35.565113 kernel: audit: type=1103 audit(1696277255.552:1191): pid=2621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:35.565248 kernel: audit: type=1006 audit(1696277255.552:1192): pid=2621 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 20:07:35.552000 audit[2621]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe93d0ee00 a2=3 a3=0 items=0 ppid=1 pid=2621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:35.583049 kernel: audit: type=1300 audit(1696277255.552:1192): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe93d0ee00 a2=3 a3=0 items=0 ppid=1 pid=2621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:35.552000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:35.588227 kernel: audit: type=1327 audit(1696277255.552:1192): proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:35.595141 systemd-logind[1043]: New session 16 of user core. Oct 2 20:07:35.597423 systemd[1]: Started session-16.scope. Oct 2 20:07:35.609000 audit[2621]: USER_START pid=2621 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:35.623040 kernel: audit: type=1105 audit(1696277255.609:1193): pid=2621 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:35.622000 audit[2623]: CRED_ACQ pid=2623 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:35.634004 kernel: audit: type=1103 audit(1696277255.622:1194): pid=2623 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:35.991000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:35.991000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e2b200 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:07:36.017119 kernel: audit: type=1400 audit(1696277255.991:1195): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:36.017275 kernel: audit: type=1300 audit(1696277255.991:1195): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e2b200 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:07:35.991000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:35.992000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:35.992000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0011407c0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:07:35.992000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:36.376402 sshd[2621]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:36.378000 audit[2621]: USER_END pid=2621 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:36.379000 audit[2621]: CRED_DISP pid=2621 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:36.383088 systemd[1]: sshd@15-172.24.4.251:22-172.24.4.1:46182.service: Deactivated successfully. Oct 2 20:07:36.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.251:22-172.24.4.1:46182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:36.385042 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 20:07:36.386554 systemd-logind[1043]: Session 16 logged out. Waiting for processes to exit. Oct 2 20:07:36.389726 systemd-logind[1043]: Removed session 16. Oct 2 20:07:37.623046 kubelet[1928]: E1002 20:07:37.622949 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:38.254000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:38.254000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00c006840 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:07:38.254000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:07:38.254000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525367 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:38.254000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00c160660 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:07:38.254000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:07:38.255000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:38.255000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00c006870 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:07:38.255000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:07:38.260000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:38.260000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00db694a0 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:07:38.260000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:07:38.340000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:38.340000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00dbc42c0 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:07:38.340000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:07:38.340000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:38.340000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00c160930 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:07:38.340000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:07:42.625403 kubelet[1928]: E1002 20:07:42.625358 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:45.419095 kubelet[1928]: E1002 20:07:45.419042 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:07:46.391969 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:07:46.392169 kernel: audit: type=1130 audit(1696277266.387:1206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.251:22-172.24.4.1:48942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:46.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.251:22-172.24.4.1:48942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:46.388438 systemd[1]: Started sshd@16-172.24.4.251:22-172.24.4.1:48942.service. Oct 2 20:07:47.543000 audit[2636]: USER_ACCT pid=2636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:47.545033 sshd[2636]: Accepted publickey for core from 172.24.4.1 port 48942 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:07:47.554000 audit[2636]: CRED_ACQ pid=2636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:47.556642 sshd[2636]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:47.565822 kernel: audit: type=1101 audit(1696277267.543:1207): pid=2636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:47.566037 kernel: audit: type=1103 audit(1696277267.554:1208): pid=2636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:47.573074 kernel: audit: type=1006 audit(1696277267.555:1209): pid=2636 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 20:07:47.555000 audit[2636]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd57b2a7e0 a2=3 a3=0 items=0 ppid=1 pid=2636 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:47.555000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:47.589054 kernel: audit: type=1300 audit(1696277267.555:1209): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd57b2a7e0 a2=3 a3=0 items=0 ppid=1 pid=2636 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:47.589192 kernel: audit: type=1327 audit(1696277267.555:1209): proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:47.597008 systemd-logind[1043]: New session 17 of user core. Oct 2 20:07:47.598048 systemd[1]: Started session-17.scope. Oct 2 20:07:47.610000 audit[2636]: USER_START pid=2636 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:47.624911 kernel: audit: type=1105 audit(1696277267.610:1210): pid=2636 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:47.625115 kernel: audit: type=1103 audit(1696277267.623:1211): pid=2638 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:47.623000 audit[2638]: CRED_ACQ pid=2638 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:47.636089 kubelet[1928]: E1002 20:07:47.635994 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:48.381982 sshd[2636]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:48.383000 audit[2636]: USER_END pid=2636 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:48.389203 systemd[1]: sshd@16-172.24.4.251:22-172.24.4.1:48942.service: Deactivated successfully. Oct 2 20:07:48.390770 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 20:07:48.383000 audit[2636]: CRED_DISP pid=2636 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:48.398705 systemd[1]: Started sshd@17-172.24.4.251:22-172.24.4.1:48954.service. Oct 2 20:07:48.401729 systemd-logind[1043]: Session 17 logged out. Waiting for processes to exit. Oct 2 20:07:48.406742 kernel: audit: type=1106 audit(1696277268.383:1212): pid=2636 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:48.406874 kernel: audit: type=1104 audit(1696277268.383:1213): pid=2636 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:48.405829 systemd-logind[1043]: Removed session 17. Oct 2 20:07:48.388000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.251:22-172.24.4.1:48942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:48.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.251:22-172.24.4.1:48954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:49.579158 sshd[2649]: Accepted publickey for core from 172.24.4.1 port 48954 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:07:49.578000 audit[2649]: USER_ACCT pid=2649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:49.580000 audit[2649]: CRED_ACQ pid=2649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:49.581000 audit[2649]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc19cc8c0 a2=3 a3=0 items=0 ppid=1 pid=2649 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:49.581000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:49.583763 sshd[2649]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:49.596445 systemd[1]: Started session-18.scope. Oct 2 20:07:49.599048 systemd-logind[1043]: New session 18 of user core. Oct 2 20:07:49.613000 audit[2649]: USER_START pid=2649 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:49.616000 audit[2651]: CRED_ACQ pid=2651 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:50.922000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:50.922000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e27660 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:07:50.922000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:50.926000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:50.926000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e27780 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:07:50.926000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:50.927000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:50.927000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e278e0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:07:50.927000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:50.933000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:50.933000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e27a40 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:07:50.933000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:51.351408 sshd[2649]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:51.360002 systemd[1]: Started sshd@18-172.24.4.251:22-172.24.4.1:48964.service. Oct 2 20:07:51.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.251:22-172.24.4.1:48964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:51.366000 audit[2649]: USER_END pid=2649 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:51.366000 audit[2649]: CRED_DISP pid=2649 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:51.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.251:22-172.24.4.1:48954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:51.370471 systemd[1]: sshd@17-172.24.4.251:22-172.24.4.1:48954.service: Deactivated successfully. Oct 2 20:07:51.372358 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 20:07:51.376603 systemd-logind[1043]: Session 18 logged out. Waiting for processes to exit. Oct 2 20:07:51.380080 systemd-logind[1043]: Removed session 18. Oct 2 20:07:52.527000 audit[2658]: USER_ACCT pid=2658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:52.529369 sshd[2658]: Accepted publickey for core from 172.24.4.1 port 48964 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:07:52.532018 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:07:52.532160 kernel: audit: type=1101 audit(1696277272.527:1229): pid=2658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:52.544000 audit[2658]: CRED_ACQ pid=2658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:52.546295 sshd[2658]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:52.557705 kernel: audit: type=1103 audit(1696277272.544:1230): pid=2658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:52.564974 kernel: audit: type=1006 audit(1696277272.544:1231): pid=2658 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 20:07:52.544000 audit[2658]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd3c43770 a2=3 a3=0 items=0 ppid=1 pid=2658 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:52.581311 kernel: audit: type=1300 audit(1696277272.544:1231): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd3c43770 a2=3 a3=0 items=0 ppid=1 pid=2658 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:52.581502 kernel: audit: type=1327 audit(1696277272.544:1231): proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:52.544000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:52.589120 systemd-logind[1043]: New session 19 of user core. Oct 2 20:07:52.590118 systemd[1]: Started session-19.scope. Oct 2 20:07:52.602000 audit[2658]: USER_START pid=2658 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:52.605000 audit[2661]: CRED_ACQ pid=2661 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:52.626045 kernel: audit: type=1105 audit(1696277272.602:1232): pid=2658 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:52.626176 kernel: audit: type=1103 audit(1696277272.605:1233): pid=2661 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:52.637737 kubelet[1928]: E1002 20:07:52.637696 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:53.385193 sshd[2658]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:53.386000 audit[2658]: USER_END pid=2658 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:53.400751 systemd[1]: sshd@18-172.24.4.251:22-172.24.4.1:48964.service: Deactivated successfully. Oct 2 20:07:53.401300 kernel: audit: type=1106 audit(1696277273.386:1234): pid=2658 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:53.403652 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 20:07:53.387000 audit[2658]: CRED_DISP pid=2658 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:53.408558 systemd-logind[1043]: Session 19 logged out. Waiting for processes to exit. Oct 2 20:07:53.410882 systemd-logind[1043]: Removed session 19. Oct 2 20:07:53.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.251:22-172.24.4.1:48964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:53.424210 kernel: audit: type=1104 audit(1696277273.387:1235): pid=2658 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:07:53.424332 kernel: audit: type=1131 audit(1696277273.400:1236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.251:22-172.24.4.1:48964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:57.638953 kubelet[1928]: E1002 20:07:57.638860 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:59.418420 kubelet[1928]: E1002 20:07:59.418356 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:08:02.640358 kubelet[1928]: E1002 20:08:02.640278 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:03.399660 systemd[1]: Started sshd@19-172.24.4.251:22-172.24.4.1:45250.service. Oct 2 20:08:03.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.251:22-172.24.4.1:45250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:03.410962 kernel: audit: type=1130 audit(1696277283.399:1237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.251:22-172.24.4.1:45250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:04.638000 audit[2673]: USER_ACCT pid=2673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:04.639774 sshd[2673]: Accepted publickey for core from 172.24.4.1 port 45250 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:08:04.652062 kernel: audit: type=1101 audit(1696277284.638:1238): pid=2673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:04.652000 audit[2673]: CRED_ACQ pid=2673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:04.654847 sshd[2673]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:04.670056 kernel: audit: type=1103 audit(1696277284.652:1239): pid=2673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:04.670214 kernel: audit: type=1006 audit(1696277284.652:1240): pid=2673 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 20:08:04.652000 audit[2673]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdebcf3050 a2=3 a3=0 items=0 ppid=1 pid=2673 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:04.681557 kernel: audit: type=1300 audit(1696277284.652:1240): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdebcf3050 a2=3 a3=0 items=0 ppid=1 pid=2673 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:04.652000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:04.687005 kernel: audit: type=1327 audit(1696277284.652:1240): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:04.697824 systemd-logind[1043]: New session 20 of user core. Oct 2 20:08:04.701453 systemd[1]: Started session-20.scope. Oct 2 20:08:04.717000 audit[2673]: USER_START pid=2673 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:04.731028 kernel: audit: type=1105 audit(1696277284.717:1241): pid=2673 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:04.732312 kernel: audit: type=1103 audit(1696277284.730:1242): pid=2675 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:04.730000 audit[2675]: CRED_ACQ pid=2675 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:05.410067 sshd[2673]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:05.411000 audit[2673]: USER_END pid=2673 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:05.416295 systemd-logind[1043]: Session 20 logged out. Waiting for processes to exit. Oct 2 20:08:05.419590 systemd[1]: sshd@19-172.24.4.251:22-172.24.4.1:45250.service: Deactivated successfully. Oct 2 20:08:05.421204 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 20:08:05.411000 audit[2673]: CRED_DISP pid=2673 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:05.424775 systemd-logind[1043]: Removed session 20. Oct 2 20:08:05.434529 kernel: audit: type=1106 audit(1696277285.411:1243): pid=2673 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:05.434663 kernel: audit: type=1104 audit(1696277285.411:1244): pid=2673 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:05.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.251:22-172.24.4.1:45250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:07.642505 kubelet[1928]: E1002 20:08:07.642399 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:12.643818 kubelet[1928]: E1002 20:08:12.643607 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:13.423146 env[1054]: time="2023-10-02T20:08:13.422877104Z" level=info msg="CreateContainer within sandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 20:08:13.455106 env[1054]: time="2023-10-02T20:08:13.454980893Z" level=info msg="CreateContainer within sandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb\"" Oct 2 20:08:13.456700 env[1054]: time="2023-10-02T20:08:13.456577511Z" level=info msg="StartContainer for \"40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb\"" Oct 2 20:08:13.514239 systemd[1]: run-containerd-runc-k8s.io-40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb-runc.Q3ql7Z.mount: Deactivated successfully. Oct 2 20:08:13.523061 systemd[1]: Started cri-containerd-40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb.scope. Oct 2 20:08:13.535050 systemd[1]: cri-containerd-40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb.scope: Deactivated successfully. Oct 2 20:08:13.553886 env[1054]: time="2023-10-02T20:08:13.553839047Z" level=info msg="shim disconnected" id=40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb Oct 2 20:08:13.554157 env[1054]: time="2023-10-02T20:08:13.554137853Z" level=warning msg="cleaning up after shim disconnected" id=40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb namespace=k8s.io Oct 2 20:08:13.554251 env[1054]: time="2023-10-02T20:08:13.554235412Z" level=info msg="cleaning up dead shim" Oct 2 20:08:13.562500 env[1054]: time="2023-10-02T20:08:13.562443828Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:08:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2709 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:08:13Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:08:13.563000 env[1054]: time="2023-10-02T20:08:13.562883776Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 20:08:13.566034 env[1054]: time="2023-10-02T20:08:13.564998783Z" level=error msg="Failed to pipe stderr of container \"40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb\"" error="reading from a closed fifo" Oct 2 20:08:13.566173 env[1054]: time="2023-10-02T20:08:13.566137068Z" level=error msg="Failed to pipe stdout of container \"40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb\"" error="reading from a closed fifo" Oct 2 20:08:13.569027 env[1054]: time="2023-10-02T20:08:13.568972325Z" level=error msg="StartContainer for \"40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:08:13.569599 kubelet[1928]: E1002 20:08:13.569255 1928 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb" Oct 2 20:08:13.569599 kubelet[1928]: E1002 20:08:13.569371 1928 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:08:13.569599 kubelet[1928]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:08:13.569599 kubelet[1928]: rm /hostbin/cilium-mount Oct 2 20:08:13.569599 kubelet[1928]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gwbcr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:08:13.569599 kubelet[1928]: E1002 20:08:13.569417 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:08:14.308495 kubelet[1928]: I1002 20:08:14.308439 1928 scope.go:115] "RemoveContainer" containerID="82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712" Oct 2 20:08:14.309235 kubelet[1928]: I1002 20:08:14.309135 1928 scope.go:115] "RemoveContainer" containerID="82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712" Oct 2 20:08:14.319275 env[1054]: time="2023-10-02T20:08:14.319209511Z" level=info msg="RemoveContainer for \"82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712\"" Oct 2 20:08:14.320659 env[1054]: time="2023-10-02T20:08:14.320607454Z" level=info msg="RemoveContainer for \"82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712\"" Oct 2 20:08:14.321124 env[1054]: time="2023-10-02T20:08:14.321051780Z" level=error msg="RemoveContainer for \"82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712\" failed" error="failed to set removing state for container \"82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712\": container is already in removing state" Oct 2 20:08:14.325385 kubelet[1928]: E1002 20:08:14.325333 1928 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712\": container is already in removing state" containerID="82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712" Oct 2 20:08:14.325564 kubelet[1928]: E1002 20:08:14.325446 1928 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712": container is already in removing state; Skipping pod "cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)" Oct 2 20:08:14.326515 kubelet[1928]: E1002 20:08:14.326468 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:08:14.327101 env[1054]: time="2023-10-02T20:08:14.326956809Z" level=info msg="RemoveContainer for \"82468dbbe81dfaf1bdf53a8d0c64d1c0eb82235b6bec9a1c8ed0b9f757b72712\" returns successfully" Oct 2 20:08:14.443616 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb-rootfs.mount: Deactivated successfully. Oct 2 20:08:15.434276 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:15.434574 kernel: audit: type=1130 audit(1696277295.419:1246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.251:22-172.24.4.1:45886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:15.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.251:22-172.24.4.1:45886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:15.420394 systemd[1]: Started sshd@20-172.24.4.251:22-172.24.4.1:45886.service. Oct 2 20:08:16.574000 audit[2723]: USER_ACCT pid=2723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:16.586821 sshd[2723]: Accepted publickey for core from 172.24.4.1 port 45886 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:08:16.587463 kernel: audit: type=1101 audit(1696277296.574:1247): pid=2723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:16.586000 audit[2723]: CRED_ACQ pid=2723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:16.587730 sshd[2723]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:16.598630 kernel: audit: type=1103 audit(1696277296.586:1248): pid=2723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:16.598785 kernel: audit: type=1006 audit(1696277296.586:1249): pid=2723 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 20:08:16.586000 audit[2723]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7409c160 a2=3 a3=0 items=0 ppid=1 pid=2723 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:16.615962 kernel: audit: type=1300 audit(1696277296.586:1249): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7409c160 a2=3 a3=0 items=0 ppid=1 pid=2723 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:16.616109 kernel: audit: type=1327 audit(1696277296.586:1249): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:16.586000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:16.628469 systemd-logind[1043]: New session 21 of user core. Oct 2 20:08:16.630259 systemd[1]: Started session-21.scope. Oct 2 20:08:16.641000 audit[2723]: USER_START pid=2723 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:16.655032 kernel: audit: type=1105 audit(1696277296.641:1250): pid=2723 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:16.654000 audit[2725]: CRED_ACQ pid=2725 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:16.661325 kubelet[1928]: W1002 20:08:16.661247 1928 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode24771d0_6a77_4c0d_80f7_a46444268524.slice/cri-containerd-40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb.scope WatchSource:0}: task 40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb not found: not found Oct 2 20:08:16.666047 kernel: audit: type=1103 audit(1696277296.654:1251): pid=2725 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:17.289098 sshd[2723]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:17.291000 audit[2723]: USER_END pid=2723 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:17.304982 kernel: audit: type=1106 audit(1696277297.291:1252): pid=2723 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:17.291000 audit[2723]: CRED_DISP pid=2723 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:17.305619 systemd[1]: sshd@20-172.24.4.251:22-172.24.4.1:45886.service: Deactivated successfully. Oct 2 20:08:17.307245 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 20:08:17.315603 systemd-logind[1043]: Session 21 logged out. Waiting for processes to exit. Oct 2 20:08:17.315971 kernel: audit: type=1104 audit(1696277297.291:1253): pid=2723 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:17.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.251:22-172.24.4.1:45886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:17.318144 systemd-logind[1043]: Removed session 21. Oct 2 20:08:17.645624 kubelet[1928]: E1002 20:08:17.645571 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:22.647962 kubelet[1928]: E1002 20:08:22.647786 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:25.418858 kubelet[1928]: E1002 20:08:25.418786 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:08:27.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.251:22-172.24.4.1:53042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:27.305164 systemd[1]: Started sshd@21-172.24.4.251:22-172.24.4.1:53042.service. Oct 2 20:08:27.308744 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:27.308854 kernel: audit: type=1130 audit(1696277307.304:1255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.251:22-172.24.4.1:53042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:27.650013 kubelet[1928]: E1002 20:08:27.649843 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:28.462000 audit[2737]: USER_ACCT pid=2737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:28.464223 sshd[2737]: Accepted publickey for core from 172.24.4.1 port 53042 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:08:28.473000 audit[2737]: CRED_ACQ pid=2737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:28.476006 sshd[2737]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:28.484724 kernel: audit: type=1101 audit(1696277308.462:1256): pid=2737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:28.484853 kernel: audit: type=1103 audit(1696277308.473:1257): pid=2737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:28.492021 kernel: audit: type=1006 audit(1696277308.474:1258): pid=2737 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 20:08:28.474000 audit[2737]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe07b54f20 a2=3 a3=0 items=0 ppid=1 pid=2737 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:28.474000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:28.507487 kernel: audit: type=1300 audit(1696277308.474:1258): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe07b54f20 a2=3 a3=0 items=0 ppid=1 pid=2737 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:28.507620 kernel: audit: type=1327 audit(1696277308.474:1258): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:28.515005 systemd-logind[1043]: New session 22 of user core. Oct 2 20:08:28.516041 systemd[1]: Started session-22.scope. Oct 2 20:08:28.530000 audit[2737]: USER_START pid=2737 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:28.555040 kernel: audit: type=1105 audit(1696277308.530:1259): pid=2737 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:28.553000 audit[2739]: CRED_ACQ pid=2739 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:28.566015 kernel: audit: type=1103 audit(1696277308.553:1260): pid=2739 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:29.188391 sshd[2737]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:29.189000 audit[2737]: USER_END pid=2737 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:29.191000 audit[2737]: CRED_DISP pid=2737 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:29.217222 kernel: audit: type=1106 audit(1696277309.189:1261): pid=2737 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:29.217347 kernel: audit: type=1104 audit(1696277309.191:1262): pid=2737 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:29.217726 systemd[1]: sshd@21-172.24.4.251:22-172.24.4.1:53042.service: Deactivated successfully. Oct 2 20:08:29.217000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.251:22-172.24.4.1:53042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:29.219426 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 20:08:29.220893 systemd-logind[1043]: Session 22 logged out. Waiting for processes to exit. Oct 2 20:08:29.222792 systemd-logind[1043]: Removed session 22. Oct 2 20:08:32.652324 kubelet[1928]: E1002 20:08:32.652258 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:35.993000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:35.997482 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:35.997591 kernel: audit: type=1400 audit(1696277315.993:1264): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:35.993000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001fb0840 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:08:36.020904 kernel: audit: type=1300 audit(1696277315.993:1264): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001fb0840 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:08:36.021067 kernel: audit: type=1327 audit(1696277315.993:1264): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:35.993000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:35.993000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:36.042115 kernel: audit: type=1400 audit(1696277315.993:1265): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:36.042250 kernel: audit: type=1300 audit(1696277315.993:1265): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013bc120 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:08:35.993000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013bc120 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:08:35.993000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:36.066582 kernel: audit: type=1327 audit(1696277315.993:1265): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:37.654454 kubelet[1928]: E1002 20:08:37.654370 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:38.255000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525367 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:38.266062 kernel: audit: type=1400 audit(1696277318.255:1266): avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525367 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:38.255000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c003179620 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:08:38.255000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:08:38.293489 kernel: audit: type=1300 audit(1696277318.255:1266): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c003179620 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:08:38.293642 kernel: audit: type=1327 audit(1696277318.255:1266): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:08:38.294028 kernel: audit: type=1400 audit(1696277318.256:1267): avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:38.256000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:38.256000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c003179890 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:08:38.256000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:08:38.265000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:38.265000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00ab9f740 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:08:38.265000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:08:38.265000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:38.265000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00a575dd0 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:08:38.265000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:08:38.341000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:38.341000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00a371bc0 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:08:38.341000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:08:38.342000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:38.342000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00a575fb0 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:08:38.342000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:08:39.201800 systemd[1]: Started sshd@22-172.24.4.251:22-172.24.4.1:54524.service. Oct 2 20:08:39.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.251:22-172.24.4.1:54524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:40.419468 kubelet[1928]: E1002 20:08:40.418977 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:08:40.501000 audit[2750]: USER_ACCT pid=2750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:40.502989 sshd[2750]: Accepted publickey for core from 172.24.4.1 port 54524 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:08:40.503000 audit[2750]: CRED_ACQ pid=2750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:40.504000 audit[2750]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1b001b50 a2=3 a3=0 items=0 ppid=1 pid=2750 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:40.504000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:40.506224 sshd[2750]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:40.515322 systemd-logind[1043]: New session 23 of user core. Oct 2 20:08:40.517136 systemd[1]: Started session-23.scope. Oct 2 20:08:40.530000 audit[2750]: USER_START pid=2750 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:40.533000 audit[2752]: CRED_ACQ pid=2752 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:41.201963 sshd[2750]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:41.207238 kernel: kauditd_printk_skb: 22 callbacks suppressed Oct 2 20:08:41.207423 kernel: audit: type=1106 audit(1696277321.203:1278): pid=2750 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:41.203000 audit[2750]: USER_END pid=2750 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:41.206000 audit[2750]: CRED_DISP pid=2750 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:41.228506 kernel: audit: type=1104 audit(1696277321.206:1279): pid=2750 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:41.229403 systemd[1]: sshd@22-172.24.4.251:22-172.24.4.1:54524.service: Deactivated successfully. Oct 2 20:08:41.230898 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 20:08:41.228000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.251:22-172.24.4.1:54524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:41.233679 systemd-logind[1043]: Session 23 logged out. Waiting for processes to exit. Oct 2 20:08:41.243987 kernel: audit: type=1131 audit(1696277321.228:1280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.251:22-172.24.4.1:54524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:41.244816 systemd-logind[1043]: Removed session 23. Oct 2 20:08:42.655539 kubelet[1928]: E1002 20:08:42.655496 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:47.659185 kubelet[1928]: E1002 20:08:47.659065 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:50.924000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:50.924000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00136bc60 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:08:50.949653 kernel: audit: type=1400 audit(1696277330.924:1281): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:50.949816 kernel: audit: type=1300 audit(1696277330.924:1281): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00136bc60 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:08:50.949890 kernel: audit: type=1327 audit(1696277330.924:1281): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:50.924000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:50.927000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:50.970980 kernel: audit: type=1400 audit(1696277330.927:1282): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:50.971108 kernel: audit: type=1300 audit(1696277330.927:1282): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00136bc80 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:08:50.927000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00136bc80 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:08:50.927000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:50.995573 kernel: audit: type=1327 audit(1696277330.927:1282): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:50.995697 kernel: audit: type=1400 audit(1696277330.928:1283): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:50.928000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:50.928000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00136bdc0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:08:51.010690 kernel: audit: type=1300 audit(1696277330.928:1283): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00136bdc0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:08:51.010814 kernel: audit: type=1327 audit(1696277330.928:1283): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:50.928000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:51.015450 kernel: audit: type=1400 audit(1696277330.934:1284): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:50.934000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:50.934000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013bd7a0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:08:50.934000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:51.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.251:22-172.24.4.1:45986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:51.213097 systemd[1]: Started sshd@23-172.24.4.251:22-172.24.4.1:45986.service. Oct 2 20:08:52.341000 audit[2764]: USER_ACCT pid=2764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:52.342700 sshd[2764]: Accepted publickey for core from 172.24.4.1 port 45986 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:08:52.344000 audit[2764]: CRED_ACQ pid=2764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:52.344000 audit[2764]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff90e7e810 a2=3 a3=0 items=0 ppid=1 pid=2764 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:52.344000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:52.347325 sshd[2764]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:52.366714 systemd-logind[1043]: New session 24 of user core. Oct 2 20:08:52.367508 systemd[1]: Started session-24.scope. Oct 2 20:08:52.380000 audit[2764]: USER_START pid=2764 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:52.383000 audit[2769]: CRED_ACQ pid=2769 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:52.661287 kubelet[1928]: E1002 20:08:52.661219 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:53.130720 sshd[2764]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:53.132000 audit[2764]: USER_END pid=2764 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:53.133000 audit[2764]: CRED_DISP pid=2764 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:08:53.136645 systemd[1]: sshd@23-172.24.4.251:22-172.24.4.1:45986.service: Deactivated successfully. Oct 2 20:08:53.136000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.251:22-172.24.4.1:45986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:53.138341 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 20:08:53.139742 systemd-logind[1043]: Session 24 logged out. Waiting for processes to exit. Oct 2 20:08:53.141853 systemd-logind[1043]: Removed session 24. Oct 2 20:08:54.418406 kubelet[1928]: E1002 20:08:54.418340 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:08:57.662658 kubelet[1928]: E1002 20:08:57.662525 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:02.665403 kubelet[1928]: E1002 20:09:02.665312 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:03.141319 systemd[1]: Started sshd@24-172.24.4.251:22-172.24.4.1:39562.service. Oct 2 20:09:03.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.24.4.251:22-172.24.4.1:39562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:03.146032 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:09:03.146194 kernel: audit: type=1130 audit(1696277343.141:1294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.24.4.251:22-172.24.4.1:39562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:04.381000 audit[2782]: USER_ACCT pid=2782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:04.382657 sshd[2782]: Accepted publickey for core from 172.24.4.1 port 39562 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:09:04.394036 kernel: audit: type=1101 audit(1696277344.381:1295): pid=2782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:04.393000 audit[2782]: CRED_ACQ pid=2782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:04.395372 sshd[2782]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:04.415516 kernel: audit: type=1103 audit(1696277344.393:1296): pid=2782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:04.415639 kernel: audit: type=1006 audit(1696277344.393:1297): pid=2782 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 20:09:04.416966 kernel: audit: type=1300 audit(1696277344.393:1297): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8b6f8900 a2=3 a3=0 items=0 ppid=1 pid=2782 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:04.393000 audit[2782]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8b6f8900 a2=3 a3=0 items=0 ppid=1 pid=2782 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:04.393000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:04.433000 kernel: audit: type=1327 audit(1696277344.393:1297): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:04.440853 systemd-logind[1043]: New session 25 of user core. Oct 2 20:09:04.443587 systemd[1]: Started session-25.scope. Oct 2 20:09:04.459000 audit[2782]: USER_START pid=2782 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:04.466141 kernel: audit: type=1105 audit(1696277344.459:1298): pid=2782 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:04.466000 audit[2784]: CRED_ACQ pid=2784 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:04.471970 kernel: audit: type=1103 audit(1696277344.466:1299): pid=2784 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:05.094377 sshd[2782]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:05.095000 audit[2782]: USER_END pid=2782 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:05.108019 kernel: audit: type=1106 audit(1696277345.095:1300): pid=2782 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:05.096000 audit[2782]: CRED_DISP pid=2782 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:05.119411 kernel: audit: type=1104 audit(1696277345.096:1301): pid=2782 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:05.118739 systemd[1]: sshd@24-172.24.4.251:22-172.24.4.1:39562.service: Deactivated successfully. Oct 2 20:09:05.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.24.4.251:22-172.24.4.1:39562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:05.121189 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 20:09:05.123110 systemd-logind[1043]: Session 25 logged out. Waiting for processes to exit. Oct 2 20:09:05.125825 systemd-logind[1043]: Removed session 25. Oct 2 20:09:06.418600 kubelet[1928]: E1002 20:09:06.418532 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:09:07.667006 kubelet[1928]: E1002 20:09:07.666959 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:12.669782 kubelet[1928]: E1002 20:09:12.669702 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:15.104981 systemd[1]: Started sshd@25-172.24.4.251:22-172.24.4.1:52662.service. Oct 2 20:09:15.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.24.4.251:22-172.24.4.1:52662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:15.110877 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:15.111022 kernel: audit: type=1130 audit(1696277355.105:1303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.24.4.251:22-172.24.4.1:52662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:16.367000 audit[2796]: USER_ACCT pid=2796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:16.368656 sshd[2796]: Accepted publickey for core from 172.24.4.1 port 52662 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:09:16.379109 kernel: audit: type=1101 audit(1696277356.367:1304): pid=2796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:16.378000 audit[2796]: CRED_ACQ pid=2796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:16.380885 sshd[2796]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:16.390073 kernel: audit: type=1103 audit(1696277356.378:1305): pid=2796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:16.406022 kernel: audit: type=1006 audit(1696277356.379:1306): pid=2796 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 20:09:16.406234 kernel: audit: type=1300 audit(1696277356.379:1306): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed09defd0 a2=3 a3=0 items=0 ppid=1 pid=2796 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:16.379000 audit[2796]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed09defd0 a2=3 a3=0 items=0 ppid=1 pid=2796 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:16.379000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:16.421591 kernel: audit: type=1327 audit(1696277356.379:1306): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:16.430796 systemd-logind[1043]: New session 26 of user core. Oct 2 20:09:16.433408 systemd[1]: Started session-26.scope. Oct 2 20:09:16.445000 audit[2796]: USER_START pid=2796 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:16.458889 kernel: audit: type=1105 audit(1696277356.445:1307): pid=2796 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:16.459184 kernel: audit: type=1103 audit(1696277356.457:1308): pid=2798 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:16.457000 audit[2798]: CRED_ACQ pid=2798 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:17.200842 sshd[2796]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:17.201000 audit[2796]: USER_END pid=2796 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:17.208533 systemd-logind[1043]: Session 26 logged out. Waiting for processes to exit. Oct 2 20:09:17.211512 systemd[1]: sshd@25-172.24.4.251:22-172.24.4.1:52662.service: Deactivated successfully. Oct 2 20:09:17.213037 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 20:09:17.218112 kernel: audit: type=1106 audit(1696277357.201:1309): pid=2796 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:17.218191 kernel: audit: type=1104 audit(1696277357.202:1310): pid=2796 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:17.202000 audit[2796]: CRED_DISP pid=2796 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:17.216272 systemd-logind[1043]: Removed session 26. Oct 2 20:09:17.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.24.4.251:22-172.24.4.1:52662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:17.672475 kubelet[1928]: E1002 20:09:17.672434 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:21.424461 kubelet[1928]: E1002 20:09:21.424296 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:09:22.674896 kubelet[1928]: E1002 20:09:22.674851 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:27.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.24.4.251:22-172.24.4.1:59848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:27.212141 systemd[1]: Started sshd@26-172.24.4.251:22-172.24.4.1:59848.service. Oct 2 20:09:27.217844 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:27.218025 kernel: audit: type=1130 audit(1696277367.211:1312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.24.4.251:22-172.24.4.1:59848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:27.677398 kubelet[1928]: E1002 20:09:27.677323 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:28.637000 audit[2810]: USER_ACCT pid=2810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:28.649792 sshd[2810]: Accepted publickey for core from 172.24.4.1 port 59848 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:09:28.650487 kernel: audit: type=1101 audit(1696277368.637:1313): pid=2810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:28.649000 audit[2810]: CRED_ACQ pid=2810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:28.651682 sshd[2810]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:28.668059 kernel: audit: type=1103 audit(1696277368.649:1314): pid=2810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:28.668310 kernel: audit: type=1006 audit(1696277368.649:1315): pid=2810 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 20:09:28.668385 kernel: audit: type=1300 audit(1696277368.649:1315): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6716cfd0 a2=3 a3=0 items=0 ppid=1 pid=2810 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:28.649000 audit[2810]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6716cfd0 a2=3 a3=0 items=0 ppid=1 pid=2810 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:28.649000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:28.683325 kernel: audit: type=1327 audit(1696277368.649:1315): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:28.687905 systemd-logind[1043]: New session 27 of user core. Oct 2 20:09:28.688730 systemd[1]: Started session-27.scope. Oct 2 20:09:28.700000 audit[2810]: USER_START pid=2810 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:28.714910 kernel: audit: type=1105 audit(1696277368.700:1316): pid=2810 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:28.715124 kernel: audit: type=1103 audit(1696277368.713:1317): pid=2812 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:28.713000 audit[2812]: CRED_ACQ pid=2812 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:29.267561 sshd[2810]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:29.269000 audit[2810]: USER_END pid=2810 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:29.286232 kernel: audit: type=1106 audit(1696277369.269:1318): pid=2810 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:29.286372 kernel: audit: type=1104 audit(1696277369.270:1319): pid=2810 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:29.270000 audit[2810]: CRED_DISP pid=2810 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:29.283352 systemd[1]: sshd@26-172.24.4.251:22-172.24.4.1:59848.service: Deactivated successfully. Oct 2 20:09:29.285065 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 20:09:29.293538 systemd-logind[1043]: Session 27 logged out. Waiting for processes to exit. Oct 2 20:09:29.282000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.24.4.251:22-172.24.4.1:59848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:29.295688 systemd-logind[1043]: Removed session 27. Oct 2 20:09:32.419676 kubelet[1928]: E1002 20:09:32.419617 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-q2r57_kube-system(e24771d0-6a77-4c0d-80f7-a46444268524)\"" pod="kube-system/cilium-q2r57" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 Oct 2 20:09:32.679821 kubelet[1928]: E1002 20:09:32.679195 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:36.001073 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:36.001308 kernel: audit: type=1400 audit(1696277375.995:1321): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:35.995000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:35.995000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c84ea0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:09:36.022311 kernel: audit: type=1300 audit(1696277375.995:1321): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c84ea0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:09:36.022447 kernel: audit: type=1327 audit(1696277375.995:1321): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:35.995000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:35.998000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:36.043977 kernel: audit: type=1400 audit(1696277375.998:1322): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:35.998000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ba1fb0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:09:36.057490 kernel: audit: type=1300 audit(1696277375.998:1322): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ba1fb0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:09:36.057614 kernel: audit: type=1327 audit(1696277375.998:1322): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:35.998000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:37.682033 kubelet[1928]: E1002 20:09:37.681986 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:38.256000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525367 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:38.268085 kernel: audit: type=1400 audit(1696277378.256:1323): avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525367 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:38.256000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00b1cdb60 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:09:38.256000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:09:38.292979 kernel: audit: type=1300 audit(1696277378.256:1323): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00b1cdb60 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:09:38.293132 kernel: audit: type=1327 audit(1696277378.256:1323): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:09:38.293204 kernel: audit: type=1400 audit(1696277378.259:1324): avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:38.259000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:38.259000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00b4b9500 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:09:38.259000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:09:38.266000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:38.266000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00b4b9590 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:09:38.266000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:09:38.267000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:38.267000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00dfa5f40 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:09:38.267000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:09:38.341000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:38.341000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00e4f0080 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:09:38.341000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:09:38.342000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:38.342000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00b1cde90 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:09:38.342000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:09:39.282850 systemd[1]: Started sshd@27-172.24.4.251:22-172.24.4.1:48870.service. Oct 2 20:09:39.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.24.4.251:22-172.24.4.1:48870 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:40.427000 audit[2822]: USER_ACCT pid=2822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:40.430826 sshd[2822]: Accepted publickey for core from 172.24.4.1 port 48870 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:09:40.431000 audit[2822]: CRED_ACQ pid=2822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:40.431000 audit[2822]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffefd2caa0 a2=3 a3=0 items=0 ppid=1 pid=2822 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:40.431000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:40.433757 sshd[2822]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:40.445395 systemd-logind[1043]: New session 28 of user core. Oct 2 20:09:40.446400 systemd[1]: Started session-28.scope. Oct 2 20:09:40.460000 audit[2822]: USER_START pid=2822 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:40.463000 audit[2824]: CRED_ACQ pid=2824 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:41.284770 sshd[2822]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:41.288000 audit[2822]: USER_END pid=2822 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:41.292728 kernel: kauditd_printk_skb: 22 callbacks suppressed Oct 2 20:09:41.293104 kernel: audit: type=1106 audit(1696277381.288:1335): pid=2822 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:41.304511 systemd[1]: Started sshd@28-172.24.4.251:22-172.24.4.1:48886.service. Oct 2 20:09:41.310290 systemd[1]: sshd@27-172.24.4.251:22-172.24.4.1:48870.service: Deactivated successfully. Oct 2 20:09:41.311911 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 20:09:41.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.24.4.251:22-172.24.4.1:48886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:41.326480 systemd-logind[1043]: Session 28 logged out. Waiting for processes to exit. Oct 2 20:09:41.327172 kernel: audit: type=1130 audit(1696277381.306:1336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.24.4.251:22-172.24.4.1:48886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:41.306000 audit[2822]: CRED_DISP pid=2822 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:41.340007 kernel: audit: type=1104 audit(1696277381.306:1337): pid=2822 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:41.340725 systemd-logind[1043]: Removed session 28. Oct 2 20:09:41.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.24.4.251:22-172.24.4.1:48870 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:41.353032 kernel: audit: type=1131 audit(1696277381.309:1338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.24.4.251:22-172.24.4.1:48870 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:42.330000 audit[2833]: USER_ACCT pid=2833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:42.332249 sshd[2833]: Accepted publickey for core from 172.24.4.1 port 48886 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:09:42.343043 kernel: audit: type=1101 audit(1696277382.330:1339): pid=2833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:42.343000 audit[2833]: CRED_ACQ pid=2833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:42.345646 sshd[2833]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:42.355986 kernel: audit: type=1103 audit(1696277382.343:1340): pid=2833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:42.364007 kernel: audit: type=1006 audit(1696277382.343:1341): pid=2833 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 20:09:42.343000 audit[2833]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc0c248820 a2=3 a3=0 items=0 ppid=1 pid=2833 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:42.378986 kernel: audit: type=1300 audit(1696277382.343:1341): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc0c248820 a2=3 a3=0 items=0 ppid=1 pid=2833 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:42.383646 systemd-logind[1043]: New session 29 of user core. Oct 2 20:09:42.343000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:42.388172 systemd[1]: Started session-29.scope. Oct 2 20:09:42.394017 kernel: audit: type=1327 audit(1696277382.343:1341): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:42.404000 audit[2833]: USER_START pid=2833 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:42.421011 kernel: audit: type=1105 audit(1696277382.404:1342): pid=2833 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:42.406000 audit[2836]: CRED_ACQ pid=2836 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:42.684571 kubelet[1928]: E1002 20:09:42.684531 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:44.862876 env[1054]: time="2023-10-02T20:09:44.862725865Z" level=info msg="StopPodSandbox for \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\"" Oct 2 20:09:44.863447 env[1054]: time="2023-10-02T20:09:44.863109964Z" level=info msg="Container to stop \"40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:09:44.865623 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da-shm.mount: Deactivated successfully. Oct 2 20:09:44.880000 audit: BPF prog-id=109 op=UNLOAD Oct 2 20:09:44.881412 systemd[1]: cri-containerd-23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da.scope: Deactivated successfully. Oct 2 20:09:44.885000 audit: BPF prog-id=112 op=UNLOAD Oct 2 20:09:44.895717 env[1054]: time="2023-10-02T20:09:44.895641488Z" level=info msg="StopContainer for \"2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d\" with timeout 30 (s)" Oct 2 20:09:44.897096 env[1054]: time="2023-10-02T20:09:44.897060095Z" level=info msg="Stop container \"2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d\" with signal terminated" Oct 2 20:09:44.912983 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da-rootfs.mount: Deactivated successfully. Oct 2 20:09:44.933300 env[1054]: time="2023-10-02T20:09:44.933250471Z" level=info msg="shim disconnected" id=23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da Oct 2 20:09:44.933300 env[1054]: time="2023-10-02T20:09:44.933302248Z" level=warning msg="cleaning up after shim disconnected" id=23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da namespace=k8s.io Oct 2 20:09:44.933563 env[1054]: time="2023-10-02T20:09:44.933313629Z" level=info msg="cleaning up dead shim" Oct 2 20:09:44.937773 systemd[1]: cri-containerd-2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d.scope: Deactivated successfully. Oct 2 20:09:44.937000 audit: BPF prog-id=124 op=UNLOAD Oct 2 20:09:44.938080 systemd[1]: cri-containerd-2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d.scope: Consumed 1.001s CPU time. Oct 2 20:09:44.940000 audit: BPF prog-id=127 op=UNLOAD Oct 2 20:09:44.949281 env[1054]: time="2023-10-02T20:09:44.949207745Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:09:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2867 runtime=io.containerd.runc.v2\n" Oct 2 20:09:44.949675 env[1054]: time="2023-10-02T20:09:44.949646527Z" level=info msg="TearDown network for sandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" successfully" Oct 2 20:09:44.949744 env[1054]: time="2023-10-02T20:09:44.949674008Z" level=info msg="StopPodSandbox for \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" returns successfully" Oct 2 20:09:44.971269 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d-rootfs.mount: Deactivated successfully. Oct 2 20:09:44.978442 env[1054]: time="2023-10-02T20:09:44.978388174Z" level=info msg="shim disconnected" id=2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d Oct 2 20:09:44.978442 env[1054]: time="2023-10-02T20:09:44.978437616Z" level=warning msg="cleaning up after shim disconnected" id=2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d namespace=k8s.io Oct 2 20:09:44.978656 env[1054]: time="2023-10-02T20:09:44.978449368Z" level=info msg="cleaning up dead shim" Oct 2 20:09:44.988394 env[1054]: time="2023-10-02T20:09:44.988354949Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:09:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2893 runtime=io.containerd.runc.v2\n" Oct 2 20:09:44.991860 env[1054]: time="2023-10-02T20:09:44.991822252Z" level=info msg="StopContainer for \"2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d\" returns successfully" Oct 2 20:09:44.992502 env[1054]: time="2023-10-02T20:09:44.992454456Z" level=info msg="StopPodSandbox for \"1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926\"" Oct 2 20:09:44.992562 env[1054]: time="2023-10-02T20:09:44.992533124Z" level=info msg="Container to stop \"2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:09:44.994052 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926-shm.mount: Deactivated successfully. Oct 2 20:09:45.001251 systemd[1]: cri-containerd-1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926.scope: Deactivated successfully. Oct 2 20:09:45.000000 audit: BPF prog-id=117 op=UNLOAD Oct 2 20:09:45.004000 audit: BPF prog-id=120 op=UNLOAD Oct 2 20:09:45.013987 kubelet[1928]: I1002 20:09:45.013799 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "e24771d0-6a77-4c0d-80f7-a46444268524" (UID: "e24771d0-6a77-4c0d-80f7-a46444268524"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:09:45.013987 kubelet[1928]: I1002 20:09:45.013674 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-bpf-maps\") pod \"e24771d0-6a77-4c0d-80f7-a46444268524\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " Oct 2 20:09:45.013987 kubelet[1928]: I1002 20:09:45.013960 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-xtables-lock\") pod \"e24771d0-6a77-4c0d-80f7-a46444268524\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " Oct 2 20:09:45.014557 kubelet[1928]: I1002 20:09:45.014005 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "e24771d0-6a77-4c0d-80f7-a46444268524" (UID: "e24771d0-6a77-4c0d-80f7-a46444268524"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:09:45.014557 kubelet[1928]: I1002 20:09:45.014087 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e24771d0-6a77-4c0d-80f7-a46444268524-clustermesh-secrets\") pod \"e24771d0-6a77-4c0d-80f7-a46444268524\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " Oct 2 20:09:45.014557 kubelet[1928]: I1002 20:09:45.014119 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e24771d0-6a77-4c0d-80f7-a46444268524-hubble-tls\") pod \"e24771d0-6a77-4c0d-80f7-a46444268524\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " Oct 2 20:09:45.014557 kubelet[1928]: I1002 20:09:45.014488 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-cilium-run\") pod \"e24771d0-6a77-4c0d-80f7-a46444268524\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " Oct 2 20:09:45.014557 kubelet[1928]: I1002 20:09:45.014524 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e24771d0-6a77-4c0d-80f7-a46444268524-cilium-config-path\") pod \"e24771d0-6a77-4c0d-80f7-a46444268524\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " Oct 2 20:09:45.014713 kubelet[1928]: I1002 20:09:45.014586 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-cni-path\") pod \"e24771d0-6a77-4c0d-80f7-a46444268524\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " Oct 2 20:09:45.014713 kubelet[1928]: I1002 20:09:45.014632 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-gwbcr\" (UniqueName: \"kubernetes.io/projected/e24771d0-6a77-4c0d-80f7-a46444268524-kube-api-access-gwbcr\") pod \"e24771d0-6a77-4c0d-80f7-a46444268524\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " Oct 2 20:09:45.014713 kubelet[1928]: I1002 20:09:45.014661 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-host-proc-sys-net\") pod \"e24771d0-6a77-4c0d-80f7-a46444268524\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " Oct 2 20:09:45.014713 kubelet[1928]: I1002 20:09:45.014688 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-etc-cni-netd\") pod \"e24771d0-6a77-4c0d-80f7-a46444268524\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " Oct 2 20:09:45.014826 kubelet[1928]: I1002 20:09:45.014725 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-hostproc\") pod \"e24771d0-6a77-4c0d-80f7-a46444268524\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " Oct 2 20:09:45.014826 kubelet[1928]: I1002 20:09:45.014746 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-lib-modules\") pod \"e24771d0-6a77-4c0d-80f7-a46444268524\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " Oct 2 20:09:45.014826 kubelet[1928]: I1002 20:09:45.014767 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-host-proc-sys-kernel\") pod \"e24771d0-6a77-4c0d-80f7-a46444268524\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " Oct 2 20:09:45.014826 kubelet[1928]: I1002 20:09:45.014806 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-cilium-cgroup\") pod \"e24771d0-6a77-4c0d-80f7-a46444268524\" (UID: \"e24771d0-6a77-4c0d-80f7-a46444268524\") " Oct 2 20:09:45.014958 kubelet[1928]: I1002 20:09:45.014838 1928 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-bpf-maps\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:09:45.014958 kubelet[1928]: I1002 20:09:45.014857 1928 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-xtables-lock\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:09:45.014958 kubelet[1928]: I1002 20:09:45.014889 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "e24771d0-6a77-4c0d-80f7-a46444268524" (UID: "e24771d0-6a77-4c0d-80f7-a46444268524"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:09:45.015159 kubelet[1928]: I1002 20:09:45.015133 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "e24771d0-6a77-4c0d-80f7-a46444268524" (UID: "e24771d0-6a77-4c0d-80f7-a46444268524"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:09:45.015328 kubelet[1928]: W1002 20:09:45.015295 1928 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/e24771d0-6a77-4c0d-80f7-a46444268524/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:09:45.016949 kubelet[1928]: I1002 20:09:45.016693 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-cni-path" (OuterVolumeSpecName: "cni-path") pod "e24771d0-6a77-4c0d-80f7-a46444268524" (UID: "e24771d0-6a77-4c0d-80f7-a46444268524"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:09:45.017028 kubelet[1928]: I1002 20:09:45.016991 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "e24771d0-6a77-4c0d-80f7-a46444268524" (UID: "e24771d0-6a77-4c0d-80f7-a46444268524"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:09:45.017028 kubelet[1928]: I1002 20:09:45.017020 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "e24771d0-6a77-4c0d-80f7-a46444268524" (UID: "e24771d0-6a77-4c0d-80f7-a46444268524"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:09:45.017116 kubelet[1928]: I1002 20:09:45.017041 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-hostproc" (OuterVolumeSpecName: "hostproc") pod "e24771d0-6a77-4c0d-80f7-a46444268524" (UID: "e24771d0-6a77-4c0d-80f7-a46444268524"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:09:45.017116 kubelet[1928]: I1002 20:09:45.017062 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "e24771d0-6a77-4c0d-80f7-a46444268524" (UID: "e24771d0-6a77-4c0d-80f7-a46444268524"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:09:45.018546 kubelet[1928]: I1002 20:09:45.018521 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/e24771d0-6a77-4c0d-80f7-a46444268524-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "e24771d0-6a77-4c0d-80f7-a46444268524" (UID: "e24771d0-6a77-4c0d-80f7-a46444268524"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:09:45.018617 kubelet[1928]: I1002 20:09:45.018574 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "e24771d0-6a77-4c0d-80f7-a46444268524" (UID: "e24771d0-6a77-4c0d-80f7-a46444268524"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:09:45.023497 systemd[1]: var-lib-kubelet-pods-e24771d0\x2d6a77\x2d4c0d\x2d80f7\x2da46444268524-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:09:45.024815 kubelet[1928]: I1002 20:09:45.024750 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/e24771d0-6a77-4c0d-80f7-a46444268524-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "e24771d0-6a77-4c0d-80f7-a46444268524" (UID: "e24771d0-6a77-4c0d-80f7-a46444268524"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:09:45.025075 kubelet[1928]: I1002 20:09:45.025058 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e24771d0-6a77-4c0d-80f7-a46444268524-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "e24771d0-6a77-4c0d-80f7-a46444268524" (UID: "e24771d0-6a77-4c0d-80f7-a46444268524"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:09:45.028169 kubelet[1928]: I1002 20:09:45.028123 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e24771d0-6a77-4c0d-80f7-a46444268524-kube-api-access-gwbcr" (OuterVolumeSpecName: "kube-api-access-gwbcr") pod "e24771d0-6a77-4c0d-80f7-a46444268524" (UID: "e24771d0-6a77-4c0d-80f7-a46444268524"). InnerVolumeSpecName "kube-api-access-gwbcr". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:09:45.045133 env[1054]: time="2023-10-02T20:09:45.045055293Z" level=info msg="shim disconnected" id=1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926 Oct 2 20:09:45.045133 env[1054]: time="2023-10-02T20:09:45.045129182Z" level=warning msg="cleaning up after shim disconnected" id=1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926 namespace=k8s.io Oct 2 20:09:45.045397 env[1054]: time="2023-10-02T20:09:45.045144811Z" level=info msg="cleaning up dead shim" Oct 2 20:09:45.055043 env[1054]: time="2023-10-02T20:09:45.054998512Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:09:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2926 runtime=io.containerd.runc.v2\n" Oct 2 20:09:45.055526 env[1054]: time="2023-10-02T20:09:45.055497547Z" level=info msg="TearDown network for sandbox \"1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926\" successfully" Oct 2 20:09:45.055610 env[1054]: time="2023-10-02T20:09:45.055592405Z" level=info msg="StopPodSandbox for \"1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926\" returns successfully" Oct 2 20:09:45.115447 kubelet[1928]: I1002 20:09:45.115321 1928 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-gwbcr\" (UniqueName: \"kubernetes.io/projected/e24771d0-6a77-4c0d-80f7-a46444268524-kube-api-access-gwbcr\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:09:45.115447 kubelet[1928]: I1002 20:09:45.115357 1928 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-host-proc-sys-net\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:09:45.115447 kubelet[1928]: I1002 20:09:45.115399 1928 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-etc-cni-netd\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:09:45.115447 kubelet[1928]: I1002 20:09:45.115418 1928 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-hostproc\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:09:45.115447 kubelet[1928]: I1002 20:09:45.115438 1928 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-lib-modules\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:09:45.115864 kubelet[1928]: I1002 20:09:45.115479 1928 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-host-proc-sys-kernel\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:09:45.115864 kubelet[1928]: I1002 20:09:45.115495 1928 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-cilium-cgroup\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:09:45.115864 kubelet[1928]: I1002 20:09:45.115512 1928 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e24771d0-6a77-4c0d-80f7-a46444268524-clustermesh-secrets\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:09:45.115864 kubelet[1928]: I1002 20:09:45.115527 1928 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e24771d0-6a77-4c0d-80f7-a46444268524-cilium-config-path\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:09:45.115864 kubelet[1928]: I1002 20:09:45.115570 1928 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e24771d0-6a77-4c0d-80f7-a46444268524-hubble-tls\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:09:45.115864 kubelet[1928]: I1002 20:09:45.115591 1928 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-cilium-run\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:09:45.115864 kubelet[1928]: I1002 20:09:45.115613 1928 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e24771d0-6a77-4c0d-80f7-a46444268524-cni-path\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:09:45.218984 kubelet[1928]: I1002 20:09:45.216667 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d6880140-a3ae-4069-a5e2-6e63cd0cb052-cilium-config-path\") pod \"d6880140-a3ae-4069-a5e2-6e63cd0cb052\" (UID: \"d6880140-a3ae-4069-a5e2-6e63cd0cb052\") " Oct 2 20:09:45.218984 kubelet[1928]: I1002 20:09:45.216825 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-m8nxc\" (UniqueName: \"kubernetes.io/projected/d6880140-a3ae-4069-a5e2-6e63cd0cb052-kube-api-access-m8nxc\") pod \"d6880140-a3ae-4069-a5e2-6e63cd0cb052\" (UID: \"d6880140-a3ae-4069-a5e2-6e63cd0cb052\") " Oct 2 20:09:45.218984 kubelet[1928]: W1002 20:09:45.217272 1928 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/d6880140-a3ae-4069-a5e2-6e63cd0cb052/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:09:45.224797 kubelet[1928]: I1002 20:09:45.224698 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d6880140-a3ae-4069-a5e2-6e63cd0cb052-kube-api-access-m8nxc" (OuterVolumeSpecName: "kube-api-access-m8nxc") pod "d6880140-a3ae-4069-a5e2-6e63cd0cb052" (UID: "d6880140-a3ae-4069-a5e2-6e63cd0cb052"). InnerVolumeSpecName "kube-api-access-m8nxc". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:09:45.228267 kubelet[1928]: I1002 20:09:45.228147 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/d6880140-a3ae-4069-a5e2-6e63cd0cb052-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "d6880140-a3ae-4069-a5e2-6e63cd0cb052" (UID: "d6880140-a3ae-4069-a5e2-6e63cd0cb052"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:09:45.317680 kubelet[1928]: I1002 20:09:45.317625 1928 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-m8nxc\" (UniqueName: \"kubernetes.io/projected/d6880140-a3ae-4069-a5e2-6e63cd0cb052-kube-api-access-m8nxc\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:09:45.318133 kubelet[1928]: I1002 20:09:45.318103 1928 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d6880140-a3ae-4069-a5e2-6e63cd0cb052-cilium-config-path\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:09:45.608114 kubelet[1928]: I1002 20:09:45.608070 1928 scope.go:115] "RemoveContainer" containerID="2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d" Oct 2 20:09:45.626636 systemd[1]: Removed slice kubepods-besteffort-podd6880140_a3ae_4069_a5e2_6e63cd0cb052.slice. Oct 2 20:09:45.626874 systemd[1]: kubepods-besteffort-podd6880140_a3ae_4069_a5e2_6e63cd0cb052.slice: Consumed 1.036s CPU time. Oct 2 20:09:45.635617 env[1054]: time="2023-10-02T20:09:45.635551127Z" level=info msg="RemoveContainer for \"2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d\"" Oct 2 20:09:45.654559 systemd[1]: Removed slice kubepods-burstable-pode24771d0_6a77_4c0d_80f7_a46444268524.slice. Oct 2 20:09:45.658503 env[1054]: time="2023-10-02T20:09:45.657573804Z" level=info msg="RemoveContainer for \"2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d\" returns successfully" Oct 2 20:09:45.662208 kubelet[1928]: I1002 20:09:45.662172 1928 scope.go:115] "RemoveContainer" containerID="2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d" Oct 2 20:09:45.664382 env[1054]: time="2023-10-02T20:09:45.663161077Z" level=error msg="ContainerStatus for \"2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d\": not found" Oct 2 20:09:45.664586 kubelet[1928]: E1002 20:09:45.663516 1928 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d\": not found" containerID="2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d" Oct 2 20:09:45.664586 kubelet[1928]: I1002 20:09:45.663595 1928 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d} err="failed to get container status \"2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d\": rpc error: code = NotFound desc = an error occurred when try to find container \"2c796b44e1a7e571d444345cb8c639713d8b3a1fc743754ecd486977c5a62b0d\": not found" Oct 2 20:09:45.664586 kubelet[1928]: I1002 20:09:45.663623 1928 scope.go:115] "RemoveContainer" containerID="40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb" Oct 2 20:09:45.668191 env[1054]: time="2023-10-02T20:09:45.668030054Z" level=info msg="RemoveContainer for \"40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb\"" Oct 2 20:09:45.676019 env[1054]: time="2023-10-02T20:09:45.675342446Z" level=info msg="RemoveContainer for \"40c2b9478d51f3eb163a9bd66966197a4a5477d74c830a667b5b80eb808a5efb\" returns successfully" Oct 2 20:09:45.866833 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926-rootfs.mount: Deactivated successfully. Oct 2 20:09:45.867082 systemd[1]: var-lib-kubelet-pods-d6880140\x2da3ae\x2d4069\x2da5e2\x2d6e63cd0cb052-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dm8nxc.mount: Deactivated successfully. Oct 2 20:09:45.867248 systemd[1]: var-lib-kubelet-pods-e24771d0\x2d6a77\x2d4c0d\x2d80f7\x2da46444268524-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dgwbcr.mount: Deactivated successfully. Oct 2 20:09:45.867394 systemd[1]: var-lib-kubelet-pods-e24771d0\x2d6a77\x2d4c0d\x2d80f7\x2da46444268524-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:09:46.422538 kubelet[1928]: I1002 20:09:46.422472 1928 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=d6880140-a3ae-4069-a5e2-6e63cd0cb052 path="/var/lib/kubelet/pods/d6880140-a3ae-4069-a5e2-6e63cd0cb052/volumes" Oct 2 20:09:46.423560 kubelet[1928]: I1002 20:09:46.423508 1928 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=e24771d0-6a77-4c0d-80f7-a46444268524 path="/var/lib/kubelet/pods/e24771d0-6a77-4c0d-80f7-a46444268524/volumes" Oct 2 20:09:46.980267 sshd[2833]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:46.999953 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 20:09:47.000200 kernel: audit: type=1106 audit(1696277386.984:1350): pid=2833 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:46.984000 audit[2833]: USER_END pid=2833 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:46.990768 systemd[1]: sshd@28-172.24.4.251:22-172.24.4.1:48886.service: Deactivated successfully. Oct 2 20:09:46.994385 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 20:09:46.995082 systemd[1]: session-29.scope: Consumed 1.406s CPU time. Oct 2 20:09:46.984000 audit[2833]: CRED_DISP pid=2833 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:47.005300 systemd[1]: Started sshd@29-172.24.4.251:22-172.24.4.1:38986.service. Oct 2 20:09:47.015078 kernel: audit: type=1104 audit(1696277386.984:1351): pid=2833 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:47.018183 systemd-logind[1043]: Session 29 logged out. Waiting for processes to exit. Oct 2 20:09:46.986000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.24.4.251:22-172.24.4.1:48886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:47.028983 kernel: audit: type=1131 audit(1696277386.986:1352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.24.4.251:22-172.24.4.1:48886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:47.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.24.4.251:22-172.24.4.1:38986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:47.032021 systemd-logind[1043]: Removed session 29. Oct 2 20:09:47.041001 kernel: audit: type=1130 audit(1696277387.004:1353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.24.4.251:22-172.24.4.1:38986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:47.687537 kubelet[1928]: E1002 20:09:47.687494 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:48.152000 audit[2942]: USER_ACCT pid=2942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:48.166045 kernel: audit: type=1101 audit(1696277388.152:1354): pid=2942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:48.166152 sshd[2942]: Accepted publickey for core from 172.24.4.1 port 38986 ssh2: RSA SHA256:q9+Ye9PJtNeEYaEmKUiAJUY+7d4xsgDWJfPGYyGwvrE Oct 2 20:09:48.166652 sshd[2942]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:48.164000 audit[2942]: CRED_ACQ pid=2942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:48.181019 kernel: audit: type=1103 audit(1696277388.164:1355): pid=2942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:48.198097 kernel: audit: type=1006 audit(1696277388.165:1356): pid=2942 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 20:09:48.198215 kernel: audit: type=1300 audit(1696277388.165:1356): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf133c7a0 a2=3 a3=0 items=0 ppid=1 pid=2942 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:48.165000 audit[2942]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf133c7a0 a2=3 a3=0 items=0 ppid=1 pid=2942 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:48.165000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:48.216987 kernel: audit: type=1327 audit(1696277388.165:1356): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:48.225776 systemd-logind[1043]: New session 30 of user core. Oct 2 20:09:48.226400 systemd[1]: Started session-30.scope. Oct 2 20:09:48.238000 audit[2942]: USER_START pid=2942 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:48.245874 kernel: audit: type=1105 audit(1696277388.238:1357): pid=2942 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:48.244000 audit[2944]: CRED_ACQ pid=2944 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:09:48.314874 update_engine[1044]: I1002 20:09:48.314776 1044 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 20:09:48.314874 update_engine[1044]: I1002 20:09:48.314869 1044 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 20:09:48.323732 update_engine[1044]: I1002 20:09:48.323459 1044 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 20:09:48.324068 update_engine[1044]: I1002 20:09:48.323832 1044 omaha_request_params.cc:62] Current group set to lts Oct 2 20:09:48.327481 update_engine[1044]: I1002 20:09:48.327446 1044 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 20:09:48.327481 update_engine[1044]: I1002 20:09:48.327458 1044 update_attempter.cc:638] Scheduling an action processor start. Oct 2 20:09:48.327481 update_engine[1044]: I1002 20:09:48.327474 1044 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 20:09:48.327978 update_engine[1044]: I1002 20:09:48.327502 1044 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 20:09:48.327978 update_engine[1044]: I1002 20:09:48.327551 1044 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 20:09:48.327978 update_engine[1044]: I1002 20:09:48.327558 1044 omaha_request_action.cc:269] Request: Oct 2 20:09:48.327978 update_engine[1044]: Oct 2 20:09:48.327978 update_engine[1044]: Oct 2 20:09:48.327978 update_engine[1044]: Oct 2 20:09:48.327978 update_engine[1044]: Oct 2 20:09:48.327978 update_engine[1044]: Oct 2 20:09:48.327978 update_engine[1044]: Oct 2 20:09:48.327978 update_engine[1044]: Oct 2 20:09:48.327978 update_engine[1044]: Oct 2 20:09:48.327978 update_engine[1044]: I1002 20:09:48.327561 1044 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 20:09:48.343626 update_engine[1044]: I1002 20:09:48.343151 1044 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 20:09:48.343626 update_engine[1044]: I1002 20:09:48.343327 1044 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 20:09:48.356484 locksmithd[1086]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 20:09:49.186248 kubelet[1928]: I1002 20:09:49.186205 1928 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:09:49.186590 kubelet[1928]: E1002 20:09:49.186416 1928 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e24771d0-6a77-4c0d-80f7-a46444268524" containerName="mount-cgroup" Oct 2 20:09:49.186590 kubelet[1928]: E1002 20:09:49.186460 1928 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e24771d0-6a77-4c0d-80f7-a46444268524" containerName="mount-cgroup" Oct 2 20:09:49.186590 kubelet[1928]: E1002 20:09:49.186545 1928 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e24771d0-6a77-4c0d-80f7-a46444268524" containerName="mount-cgroup" Oct 2 20:09:49.186698 kubelet[1928]: E1002 20:09:49.186628 1928 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e24771d0-6a77-4c0d-80f7-a46444268524" containerName="mount-cgroup" Oct 2 20:09:49.186698 kubelet[1928]: E1002 20:09:49.186667 1928 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="d6880140-a3ae-4069-a5e2-6e63cd0cb052" containerName="cilium-operator" Oct 2 20:09:49.186861 kubelet[1928]: I1002 20:09:49.186788 1928 memory_manager.go:346] "RemoveStaleState removing state" podUID="e24771d0-6a77-4c0d-80f7-a46444268524" containerName="mount-cgroup" Oct 2 20:09:49.186906 kubelet[1928]: I1002 20:09:49.186882 1928 memory_manager.go:346] "RemoveStaleState removing state" podUID="e24771d0-6a77-4c0d-80f7-a46444268524" containerName="mount-cgroup" Oct 2 20:09:49.186988 kubelet[1928]: I1002 20:09:49.186967 1928 memory_manager.go:346] "RemoveStaleState removing state" podUID="e24771d0-6a77-4c0d-80f7-a46444268524" containerName="mount-cgroup" Oct 2 20:09:49.187033 kubelet[1928]: I1002 20:09:49.187007 1928 memory_manager.go:346] "RemoveStaleState removing state" podUID="e24771d0-6a77-4c0d-80f7-a46444268524" containerName="mount-cgroup" Oct 2 20:09:49.187105 kubelet[1928]: I1002 20:09:49.187084 1928 memory_manager.go:346] "RemoveStaleState removing state" podUID="e24771d0-6a77-4c0d-80f7-a46444268524" containerName="mount-cgroup" Oct 2 20:09:49.187193 kubelet[1928]: I1002 20:09:49.187173 1928 memory_manager.go:346] "RemoveStaleState removing state" podUID="d6880140-a3ae-4069-a5e2-6e63cd0cb052" containerName="cilium-operator" Oct 2 20:09:49.187323 kubelet[1928]: E1002 20:09:49.187301 1928 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e24771d0-6a77-4c0d-80f7-a46444268524" containerName="mount-cgroup" Oct 2 20:09:49.187415 kubelet[1928]: E1002 20:09:49.187395 1928 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e24771d0-6a77-4c0d-80f7-a46444268524" containerName="mount-cgroup" Oct 2 20:09:49.187555 kubelet[1928]: I1002 20:09:49.187525 1928 memory_manager.go:346] "RemoveStaleState removing state" podUID="e24771d0-6a77-4c0d-80f7-a46444268524" containerName="mount-cgroup" Oct 2 20:09:49.200656 systemd[1]: Created slice kubepods-burstable-pod1b33ad21_e620_497b_a97f_394f416faaf1.slice. Oct 2 20:09:49.255858 kubelet[1928]: I1002 20:09:49.255829 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-cilium-run\") pod \"cilium-rwfp2\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " pod="kube-system/cilium-rwfp2" Oct 2 20:09:49.256093 kubelet[1928]: I1002 20:09:49.256080 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-etc-cni-netd\") pod \"cilium-rwfp2\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " pod="kube-system/cilium-rwfp2" Oct 2 20:09:49.256199 kubelet[1928]: I1002 20:09:49.256188 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/1b33ad21-e620-497b-a97f-394f416faaf1-cilium-config-path\") pod \"cilium-rwfp2\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " pod="kube-system/cilium-rwfp2" Oct 2 20:09:49.256347 kubelet[1928]: I1002 20:09:49.256307 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dgvgn\" (UniqueName: \"kubernetes.io/projected/1b33ad21-e620-497b-a97f-394f416faaf1-kube-api-access-dgvgn\") pod \"cilium-rwfp2\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " pod="kube-system/cilium-rwfp2" Oct 2 20:09:49.256400 kubelet[1928]: I1002 20:09:49.256380 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-host-proc-sys-kernel\") pod \"cilium-rwfp2\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " pod="kube-system/cilium-rwfp2" Oct 2 20:09:49.256440 kubelet[1928]: I1002 20:09:49.256409 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/1b33ad21-e620-497b-a97f-394f416faaf1-hubble-tls\") pod \"cilium-rwfp2\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " pod="kube-system/cilium-rwfp2" Oct 2 20:09:49.256440 kubelet[1928]: I1002 20:09:49.256435 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/1b33ad21-e620-497b-a97f-394f416faaf1-clustermesh-secrets\") pod \"cilium-rwfp2\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " pod="kube-system/cilium-rwfp2" Oct 2 20:09:49.256508 kubelet[1928]: I1002 20:09:49.256462 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/1b33ad21-e620-497b-a97f-394f416faaf1-cilium-ipsec-secrets\") pod \"cilium-rwfp2\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " pod="kube-system/cilium-rwfp2" Oct 2 20:09:49.256508 kubelet[1928]: I1002 20:09:49.256485 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-cni-path\") pod \"cilium-rwfp2\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " pod="kube-system/cilium-rwfp2" Oct 2 20:09:49.256508 kubelet[1928]: I1002 20:09:49.256508 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-cilium-cgroup\") pod \"cilium-rwfp2\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " pod="kube-system/cilium-rwfp2" Oct 2 20:09:49.256593 kubelet[1928]: I1002 20:09:49.256530 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-lib-modules\") pod \"cilium-rwfp2\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " pod="kube-system/cilium-rwfp2" Oct 2 20:09:49.256593 kubelet[1928]: I1002 20:09:49.256553 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-host-proc-sys-net\") pod \"cilium-rwfp2\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " pod="kube-system/cilium-rwfp2" Oct 2 20:09:49.256593 kubelet[1928]: I1002 20:09:49.256576 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-xtables-lock\") pod \"cilium-rwfp2\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " pod="kube-system/cilium-rwfp2" Oct 2 20:09:49.256686 kubelet[1928]: I1002 20:09:49.256602 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-bpf-maps\") pod \"cilium-rwfp2\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " pod="kube-system/cilium-rwfp2" Oct 2 20:09:49.256686 kubelet[1928]: I1002 20:09:49.256626 1928 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-hostproc\") pod \"cilium-rwfp2\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " pod="kube-system/cilium-rwfp2" Oct 2 20:09:49.373539 update_engine[1044]: I1002 20:09:49.373497 1044 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 20:09:49.374999 update_engine[1044]: I1002 20:09:49.374540 1044 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 20:09:49.374999 update_engine[1044]: I1002 20:09:49.374876 1044 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 20:09:49.438541 update_engine[1044]: I1002 20:09:49.438094 1044 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 20:09:49.440518 update_engine[1044]: I1002 20:09:49.440485 1044 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 20:09:49.440518 update_engine[1044]: I1002 20:09:49.440515 1044 omaha_request_action.cc:619] Omaha request response: Oct 2 20:09:49.440518 update_engine[1044]: Oct 2 20:09:49.455026 update_engine[1044]: I1002 20:09:49.454980 1044 omaha_request_action.cc:409] No update. Oct 2 20:09:49.455122 update_engine[1044]: I1002 20:09:49.455029 1044 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 20:09:49.455122 update_engine[1044]: I1002 20:09:49.455040 1044 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 20:09:49.455122 update_engine[1044]: I1002 20:09:49.455049 1044 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 20:09:49.455122 update_engine[1044]: I1002 20:09:49.455056 1044 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 20:09:49.455122 update_engine[1044]: I1002 20:09:49.455063 1044 update_attempter.cc:302] Processing Done. Oct 2 20:09:49.455122 update_engine[1044]: I1002 20:09:49.455085 1044 update_attempter.cc:338] No update. Oct 2 20:09:49.455122 update_engine[1044]: I1002 20:09:49.455102 1044 update_check_scheduler.cc:74] Next update check in 43m15s Oct 2 20:09:49.455692 locksmithd[1086]: LastCheckedTime=1696277389 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 20:09:49.508042 env[1054]: time="2023-10-02T20:09:49.507983292Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-rwfp2,Uid:1b33ad21-e620-497b-a97f-394f416faaf1,Namespace:kube-system,Attempt:0,}" Oct 2 20:09:49.530884 env[1054]: time="2023-10-02T20:09:49.530561956Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:09:49.530884 env[1054]: time="2023-10-02T20:09:49.530630385Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:09:49.530884 env[1054]: time="2023-10-02T20:09:49.530659519Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:09:49.531688 env[1054]: time="2023-10-02T20:09:49.531583248Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f pid=2963 runtime=io.containerd.runc.v2 Oct 2 20:09:49.553525 systemd[1]: Started cri-containerd-01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f.scope. Oct 2 20:09:49.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit: BPF prog-id=128 op=LOAD Oct 2 20:09:49.572000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[2974]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2963 pid=2974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:49.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031623965316232373337313561376665363233313236396133653931 Oct 2 20:09:49.572000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[2974]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2963 pid=2974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:49.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031623965316232373337313561376665363233313236396133653931 Oct 2 20:09:49.572000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.572000 audit: BPF prog-id=129 op=LOAD Oct 2 20:09:49.572000 audit[2974]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0001dd6c0 items=0 ppid=2963 pid=2974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:49.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031623965316232373337313561376665363233313236396133653931 Oct 2 20:09:49.573000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.573000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.573000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.573000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.573000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.573000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.573000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.573000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.573000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.573000 audit: BPF prog-id=130 op=LOAD Oct 2 20:09:49.573000 audit[2974]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0001dd708 items=0 ppid=2963 pid=2974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:49.573000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031623965316232373337313561376665363233313236396133653931 Oct 2 20:09:49.574000 audit: BPF prog-id=130 op=UNLOAD Oct 2 20:09:49.574000 audit: BPF prog-id=129 op=UNLOAD Oct 2 20:09:49.574000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.574000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.574000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.574000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.574000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.574000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.574000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.574000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.574000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.574000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:09:49.574000 audit: BPF prog-id=131 op=LOAD Oct 2 20:09:49.574000 audit[2974]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0001ddb18 items=0 ppid=2963 pid=2974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:49.574000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031623965316232373337313561376665363233313236396133653931 Oct 2 20:09:49.592272 env[1054]: time="2023-10-02T20:09:49.592194940Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-rwfp2,Uid:1b33ad21-e620-497b-a97f-394f416faaf1,Namespace:kube-system,Attempt:0,} returns sandbox id \"01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f\"" Oct 2 20:09:49.596975 env[1054]: time="2023-10-02T20:09:49.595683930Z" level=info msg="CreateContainer within sandbox \"01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:09:49.613491 env[1054]: time="2023-10-02T20:09:49.613435912Z" level=info msg="CreateContainer within sandbox \"01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d\"" Oct 2 20:09:49.614345 env[1054]: time="2023-10-02T20:09:49.614319966Z" level=info msg="StartContainer for \"57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d\"" Oct 2 20:09:49.631033 systemd[1]: Started cri-containerd-57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d.scope. Oct 2 20:09:49.642020 systemd[1]: cri-containerd-57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d.scope: Deactivated successfully. Oct 2 20:09:49.674581 env[1054]: time="2023-10-02T20:09:49.674523094Z" level=info msg="shim disconnected" id=57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d Oct 2 20:09:49.674860 env[1054]: time="2023-10-02T20:09:49.674831221Z" level=warning msg="cleaning up after shim disconnected" id=57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d namespace=k8s.io Oct 2 20:09:49.674958 env[1054]: time="2023-10-02T20:09:49.674943070Z" level=info msg="cleaning up dead shim" Oct 2 20:09:49.684142 env[1054]: time="2023-10-02T20:09:49.684094326Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:09:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3020 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:09:49Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:09:49.684384 env[1054]: time="2023-10-02T20:09:49.684334275Z" level=error msg="copy shim log" error="read /proc/self/fd/39: file already closed" Oct 2 20:09:49.685006 env[1054]: time="2023-10-02T20:09:49.684969945Z" level=error msg="Failed to pipe stdout of container \"57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d\"" error="reading from a closed fifo" Oct 2 20:09:49.685078 env[1054]: time="2023-10-02T20:09:49.685049594Z" level=error msg="Failed to pipe stderr of container \"57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d\"" error="reading from a closed fifo" Oct 2 20:09:49.686639 env[1054]: time="2023-10-02T20:09:49.686566222Z" level=error msg="StartContainer for \"57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:09:49.686935 kubelet[1928]: E1002 20:09:49.686889 1928 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d" Oct 2 20:09:49.687086 kubelet[1928]: E1002 20:09:49.687062 1928 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:09:49.687086 kubelet[1928]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:09:49.687086 kubelet[1928]: rm /hostbin/cilium-mount Oct 2 20:09:49.687086 kubelet[1928]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-dgvgn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-rwfp2_kube-system(1b33ad21-e620-497b-a97f-394f416faaf1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:09:49.687272 kubelet[1928]: E1002 20:09:49.687135 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rwfp2" podUID=1b33ad21-e620-497b-a97f-394f416faaf1 Oct 2 20:09:50.673603 env[1054]: time="2023-10-02T20:09:50.673508016Z" level=info msg="CreateContainer within sandbox \"01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:09:50.695382 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount220542233.mount: Deactivated successfully. Oct 2 20:09:50.703974 env[1054]: time="2023-10-02T20:09:50.701183152Z" level=info msg="CreateContainer within sandbox \"01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54\"" Oct 2 20:09:50.705653 env[1054]: time="2023-10-02T20:09:50.705574189Z" level=info msg="StartContainer for \"f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54\"" Oct 2 20:09:50.747181 systemd[1]: Started cri-containerd-f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54.scope. Oct 2 20:09:50.761223 systemd[1]: cri-containerd-f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54.scope: Deactivated successfully. Oct 2 20:09:50.776296 env[1054]: time="2023-10-02T20:09:50.776193713Z" level=info msg="shim disconnected" id=f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54 Oct 2 20:09:50.776460 env[1054]: time="2023-10-02T20:09:50.776313136Z" level=warning msg="cleaning up after shim disconnected" id=f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54 namespace=k8s.io Oct 2 20:09:50.776460 env[1054]: time="2023-10-02T20:09:50.776341369Z" level=info msg="cleaning up dead shim" Oct 2 20:09:50.787124 env[1054]: time="2023-10-02T20:09:50.787070526Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:09:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3057 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:09:50Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:09:50.787549 env[1054]: time="2023-10-02T20:09:50.787495140Z" level=error msg="copy shim log" error="read /proc/self/fd/39: file already closed" Oct 2 20:09:50.794231 env[1054]: time="2023-10-02T20:09:50.794142027Z" level=error msg="Failed to pipe stderr of container \"f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54\"" error="reading from a closed fifo" Oct 2 20:09:50.794350 env[1054]: time="2023-10-02T20:09:50.794267252Z" level=error msg="Failed to pipe stdout of container \"f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54\"" error="reading from a closed fifo" Oct 2 20:09:50.799951 env[1054]: time="2023-10-02T20:09:50.799807038Z" level=error msg="StartContainer for \"f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:09:50.801463 kubelet[1928]: E1002 20:09:50.800528 1928 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54" Oct 2 20:09:50.801463 kubelet[1928]: E1002 20:09:50.800714 1928 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:09:50.801463 kubelet[1928]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:09:50.801463 kubelet[1928]: rm /hostbin/cilium-mount Oct 2 20:09:50.801463 kubelet[1928]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-dgvgn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-rwfp2_kube-system(1b33ad21-e620-497b-a97f-394f416faaf1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:09:50.801463 kubelet[1928]: E1002 20:09:50.800840 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rwfp2" podUID=1b33ad21-e620-497b-a97f-394f416faaf1 Oct 2 20:09:50.927000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:50.927000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0026ee1e0 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:09:50.927000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:50.928000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:50.928000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0026ee200 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:09:50.928000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:50.929000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:50.929000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0026ee220 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:09:50.929000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:50.937000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:50.937000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00260c080 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:09:50.937000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:51.368368 systemd[1]: run-containerd-runc-k8s.io-f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54-runc.DDRL6K.mount: Deactivated successfully. Oct 2 20:09:51.368599 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54-rootfs.mount: Deactivated successfully. Oct 2 20:09:51.666294 kubelet[1928]: I1002 20:09:51.666272 1928 scope.go:115] "RemoveContainer" containerID="57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d" Oct 2 20:09:51.666771 kubelet[1928]: I1002 20:09:51.666758 1928 scope.go:115] "RemoveContainer" containerID="57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d" Oct 2 20:09:51.668703 env[1054]: time="2023-10-02T20:09:51.668319492Z" level=info msg="RemoveContainer for \"57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d\"" Oct 2 20:09:51.668703 env[1054]: time="2023-10-02T20:09:51.668500702Z" level=info msg="RemoveContainer for \"57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d\"" Oct 2 20:09:51.668703 env[1054]: time="2023-10-02T20:09:51.668610998Z" level=error msg="RemoveContainer for \"57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d\" failed" error="failed to set removing state for container \"57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d\": container is already in removing state" Oct 2 20:09:51.668840 kubelet[1928]: E1002 20:09:51.668798 1928 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d\": container is already in removing state" containerID="57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d" Oct 2 20:09:51.668840 kubelet[1928]: E1002 20:09:51.668838 1928 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d": container is already in removing state; Skipping pod "cilium-rwfp2_kube-system(1b33ad21-e620-497b-a97f-394f416faaf1)" Oct 2 20:09:51.669287 kubelet[1928]: E1002 20:09:51.669258 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-rwfp2_kube-system(1b33ad21-e620-497b-a97f-394f416faaf1)\"" pod="kube-system/cilium-rwfp2" podUID=1b33ad21-e620-497b-a97f-394f416faaf1 Oct 2 20:09:51.672862 env[1054]: time="2023-10-02T20:09:51.672811066Z" level=info msg="RemoveContainer for \"57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d\" returns successfully" Oct 2 20:09:52.673356 kubelet[1928]: E1002 20:09:52.673299 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-rwfp2_kube-system(1b33ad21-e620-497b-a97f-394f416faaf1)\"" pod="kube-system/cilium-rwfp2" podUID=1b33ad21-e620-497b-a97f-394f416faaf1 Oct 2 20:09:52.689817 kubelet[1928]: E1002 20:09:52.689753 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:52.782131 kubelet[1928]: W1002 20:09:52.782064 1928 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod1b33ad21_e620_497b_a97f_394f416faaf1.slice/cri-containerd-57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d.scope WatchSource:0}: container "57223e832620183240b743d01f5725ba3c509459135d14e50dfccb257d93079d" in namespace "k8s.io": not found Oct 2 20:09:55.891398 kubelet[1928]: W1002 20:09:55.891307 1928 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod1b33ad21_e620_497b_a97f_394f416faaf1.slice/cri-containerd-f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54.scope WatchSource:0}: task f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54 not found: not found Oct 2 20:09:57.691493 kubelet[1928]: E1002 20:09:57.691441 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:02.694543 kubelet[1928]: E1002 20:10:02.694401 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:04.434059 env[1054]: time="2023-10-02T20:10:04.430254460Z" level=info msg="CreateContainer within sandbox \"01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:10:04.461652 env[1054]: time="2023-10-02T20:10:04.461512803Z" level=info msg="CreateContainer within sandbox \"01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2\"" Oct 2 20:10:04.462677 env[1054]: time="2023-10-02T20:10:04.462609201Z" level=info msg="StartContainer for \"0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2\"" Oct 2 20:10:04.518336 systemd[1]: run-containerd-runc-k8s.io-0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2-runc.odmevd.mount: Deactivated successfully. Oct 2 20:10:04.529739 systemd[1]: Started cri-containerd-0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2.scope. Oct 2 20:10:04.540854 systemd[1]: cri-containerd-0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2.scope: Deactivated successfully. Oct 2 20:10:04.554807 env[1054]: time="2023-10-02T20:10:04.554749217Z" level=info msg="shim disconnected" id=0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2 Oct 2 20:10:04.554807 env[1054]: time="2023-10-02T20:10:04.554808869Z" level=warning msg="cleaning up after shim disconnected" id=0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2 namespace=k8s.io Oct 2 20:10:04.555064 env[1054]: time="2023-10-02T20:10:04.554820350Z" level=info msg="cleaning up dead shim" Oct 2 20:10:04.563841 env[1054]: time="2023-10-02T20:10:04.563778996Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3095 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:10:04Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:10:04.564383 env[1054]: time="2023-10-02T20:10:04.564316199Z" level=error msg="copy shim log" error="read /proc/self/fd/39: file already closed" Oct 2 20:10:04.565082 env[1054]: time="2023-10-02T20:10:04.564790124Z" level=error msg="Failed to pipe stdout of container \"0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2\"" error="reading from a closed fifo" Oct 2 20:10:04.565249 env[1054]: time="2023-10-02T20:10:04.564822585Z" level=error msg="Failed to pipe stderr of container \"0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2\"" error="reading from a closed fifo" Oct 2 20:10:04.568203 env[1054]: time="2023-10-02T20:10:04.568162634Z" level=error msg="StartContainer for \"0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:10:04.569965 kubelet[1928]: E1002 20:10:04.569110 1928 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2" Oct 2 20:10:04.569965 kubelet[1928]: E1002 20:10:04.569496 1928 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:10:04.569965 kubelet[1928]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:10:04.569965 kubelet[1928]: rm /hostbin/cilium-mount Oct 2 20:10:04.569965 kubelet[1928]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-dgvgn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-rwfp2_kube-system(1b33ad21-e620-497b-a97f-394f416faaf1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:10:04.569965 kubelet[1928]: E1002 20:10:04.569548 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rwfp2" podUID=1b33ad21-e620-497b-a97f-394f416faaf1 Oct 2 20:10:04.719151 kubelet[1928]: I1002 20:10:04.716553 1928 scope.go:115] "RemoveContainer" containerID="f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54" Oct 2 20:10:04.719151 kubelet[1928]: I1002 20:10:04.717851 1928 scope.go:115] "RemoveContainer" containerID="f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54" Oct 2 20:10:04.725215 env[1054]: time="2023-10-02T20:10:04.725154650Z" level=info msg="RemoveContainer for \"f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54\"" Oct 2 20:10:04.730573 env[1054]: time="2023-10-02T20:10:04.730517137Z" level=info msg="RemoveContainer for \"f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54\"" Oct 2 20:10:04.731164 env[1054]: time="2023-10-02T20:10:04.731065582Z" level=error msg="RemoveContainer for \"f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54\" failed" error="failed to set removing state for container \"f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54\": container is already in removing state" Oct 2 20:10:04.734765 kubelet[1928]: E1002 20:10:04.733332 1928 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54\": container is already in removing state" containerID="f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54" Oct 2 20:10:04.734765 kubelet[1928]: E1002 20:10:04.733402 1928 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54": container is already in removing state; Skipping pod "cilium-rwfp2_kube-system(1b33ad21-e620-497b-a97f-394f416faaf1)" Oct 2 20:10:04.734765 kubelet[1928]: E1002 20:10:04.734129 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-rwfp2_kube-system(1b33ad21-e620-497b-a97f-394f416faaf1)\"" pod="kube-system/cilium-rwfp2" podUID=1b33ad21-e620-497b-a97f-394f416faaf1 Oct 2 20:10:04.738621 env[1054]: time="2023-10-02T20:10:04.738529967Z" level=info msg="RemoveContainer for \"f3c0f3ee2054b92c6aefd2fa2d08d48b73b514bddd4c7e9ab92afeb37421ee54\" returns successfully" Oct 2 20:10:05.450775 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2-rootfs.mount: Deactivated successfully. Oct 2 20:10:07.663566 kubelet[1928]: W1002 20:10:07.663507 1928 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod1b33ad21_e620_497b_a97f_394f416faaf1.slice/cri-containerd-0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2.scope WatchSource:0}: task 0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2 not found: not found Oct 2 20:10:07.696753 kubelet[1928]: E1002 20:10:07.696663 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:12.698715 kubelet[1928]: E1002 20:10:12.698627 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:17.419670 kubelet[1928]: E1002 20:10:17.419604 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-rwfp2_kube-system(1b33ad21-e620-497b-a97f-394f416faaf1)\"" pod="kube-system/cilium-rwfp2" podUID=1b33ad21-e620-497b-a97f-394f416faaf1 Oct 2 20:10:17.703088 kubelet[1928]: E1002 20:10:17.702450 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:22.704250 kubelet[1928]: E1002 20:10:22.704203 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:27.707442 kubelet[1928]: E1002 20:10:27.707352 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:32.427651 env[1054]: time="2023-10-02T20:10:32.427396485Z" level=info msg="CreateContainer within sandbox \"01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:10:32.451724 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2262470690.mount: Deactivated successfully. Oct 2 20:10:32.464143 env[1054]: time="2023-10-02T20:10:32.464045683Z" level=info msg="CreateContainer within sandbox \"01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799\"" Oct 2 20:10:32.468035 env[1054]: time="2023-10-02T20:10:32.467856085Z" level=info msg="StartContainer for \"69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799\"" Oct 2 20:10:32.534723 systemd[1]: Started cri-containerd-69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799.scope. Oct 2 20:10:32.545109 systemd[1]: cri-containerd-69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799.scope: Deactivated successfully. Oct 2 20:10:32.556065 env[1054]: time="2023-10-02T20:10:32.556005798Z" level=info msg="shim disconnected" id=69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799 Oct 2 20:10:32.556306 env[1054]: time="2023-10-02T20:10:32.556266294Z" level=warning msg="cleaning up after shim disconnected" id=69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799 namespace=k8s.io Oct 2 20:10:32.556400 env[1054]: time="2023-10-02T20:10:32.556384785Z" level=info msg="cleaning up dead shim" Oct 2 20:10:32.566167 env[1054]: time="2023-10-02T20:10:32.566118785Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3135 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:10:32Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:10:32.566692 env[1054]: time="2023-10-02T20:10:32.566642411Z" level=error msg="copy shim log" error="read /proc/self/fd/39: file already closed" Oct 2 20:10:32.567231 env[1054]: time="2023-10-02T20:10:32.567024393Z" level=error msg="Failed to pipe stdout of container \"69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799\"" error="reading from a closed fifo" Oct 2 20:10:32.567356 env[1054]: time="2023-10-02T20:10:32.567039581Z" level=error msg="Failed to pipe stderr of container \"69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799\"" error="reading from a closed fifo" Oct 2 20:10:32.570288 env[1054]: time="2023-10-02T20:10:32.570252418Z" level=error msg="StartContainer for \"69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:10:32.571984 kubelet[1928]: E1002 20:10:32.570597 1928 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799" Oct 2 20:10:32.571984 kubelet[1928]: E1002 20:10:32.570733 1928 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:10:32.571984 kubelet[1928]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:10:32.571984 kubelet[1928]: rm /hostbin/cilium-mount Oct 2 20:10:32.571984 kubelet[1928]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-dgvgn,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-rwfp2_kube-system(1b33ad21-e620-497b-a97f-394f416faaf1): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:10:32.571984 kubelet[1928]: E1002 20:10:32.570779 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rwfp2" podUID=1b33ad21-e620-497b-a97f-394f416faaf1 Oct 2 20:10:32.710758 kubelet[1928]: E1002 20:10:32.709882 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:32.823549 kubelet[1928]: I1002 20:10:32.823481 1928 scope.go:115] "RemoveContainer" containerID="0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2" Oct 2 20:10:32.824234 kubelet[1928]: I1002 20:10:32.824169 1928 scope.go:115] "RemoveContainer" containerID="0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2" Oct 2 20:10:32.827069 env[1054]: time="2023-10-02T20:10:32.827016249Z" level=info msg="RemoveContainer for \"0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2\"" Oct 2 20:10:32.829703 env[1054]: time="2023-10-02T20:10:32.829568636Z" level=info msg="RemoveContainer for \"0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2\"" Oct 2 20:10:32.829870 env[1054]: time="2023-10-02T20:10:32.829799986Z" level=error msg="RemoveContainer for \"0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2\" failed" error="failed to set removing state for container \"0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2\": container is already in removing state" Oct 2 20:10:32.834686 kubelet[1928]: E1002 20:10:32.830258 1928 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2\": container is already in removing state" containerID="0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2" Oct 2 20:10:32.834686 kubelet[1928]: E1002 20:10:32.830354 1928 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2": container is already in removing state; Skipping pod "cilium-rwfp2_kube-system(1b33ad21-e620-497b-a97f-394f416faaf1)" Oct 2 20:10:32.836313 kubelet[1928]: E1002 20:10:32.836240 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-rwfp2_kube-system(1b33ad21-e620-497b-a97f-394f416faaf1)\"" pod="kube-system/cilium-rwfp2" podUID=1b33ad21-e620-497b-a97f-394f416faaf1 Oct 2 20:10:32.851404 env[1054]: time="2023-10-02T20:10:32.851321013Z" level=info msg="RemoveContainer for \"0d9f5ed16ecbd6eb0832bae181820ae32e5c008a496eae60a7f7078d9c762bd2\" returns successfully" Oct 2 20:10:33.444523 systemd[1]: run-containerd-runc-k8s.io-69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799-runc.sqgAaV.mount: Deactivated successfully. Oct 2 20:10:33.445169 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799-rootfs.mount: Deactivated successfully. Oct 2 20:10:35.665192 kubelet[1928]: W1002 20:10:35.665124 1928 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod1b33ad21_e620_497b_a97f_394f416faaf1.slice/cri-containerd-69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799.scope WatchSource:0}: task 69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799 not found: not found Oct 2 20:10:36.000000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:36.003395 kernel: kauditd_printk_skb: 70 callbacks suppressed Oct 2 20:10:36.003547 kernel: audit: type=1400 audit(1696277436.000:1381): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:36.000000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000b5b680 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:10:36.025983 kernel: audit: type=1300 audit(1696277436.000:1381): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000b5b680 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:10:36.026157 kernel: audit: type=1327 audit(1696277436.000:1381): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:36.000000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:36.000000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:36.047726 kernel: audit: type=1400 audit(1696277436.000:1382): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:36.048074 kernel: audit: type=1300 audit(1696277436.000:1382): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a49f60 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:10:36.000000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a49f60 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:10:36.000000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:36.071285 kernel: audit: type=1327 audit(1696277436.000:1382): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:37.711595 kubelet[1928]: E1002 20:10:37.711512 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:38.257000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525367 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:38.257000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c010d679e0 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:10:38.282355 kernel: audit: type=1400 audit(1696277438.257:1383): avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525367 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:38.282503 kernel: audit: type=1300 audit(1696277438.257:1383): arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c010d679e0 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:10:38.282614 kernel: audit: type=1327 audit(1696277438.257:1383): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:10:38.257000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:10:38.259000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:38.303988 kernel: audit: type=1400 audit(1696277438.259:1384): avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:38.259000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c010d67b30 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:10:38.259000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:10:38.269000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:38.269000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00cf5ce00 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:10:38.269000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:10:38.270000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525373 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:38.270000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c010d67bc0 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:10:38.270000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:10:38.343000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:38.343000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00d108220 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:10:38.343000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:10:38.343000 audit[1808]: AVC avc: denied { watch } for pid=1808 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525371 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:38.343000 audit[1808]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00fe5e2a0 a2=fc6 a3=0 items=0 ppid=1635 pid=1808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c606 key=(null) Oct 2 20:10:38.343000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323531002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:10:42.438223 env[1054]: time="2023-10-02T20:10:42.437377023Z" level=info msg="StopPodSandbox for \"1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926\"" Oct 2 20:10:42.438223 env[1054]: time="2023-10-02T20:10:42.437660472Z" level=info msg="TearDown network for sandbox \"1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926\" successfully" Oct 2 20:10:42.438223 env[1054]: time="2023-10-02T20:10:42.437743245Z" level=info msg="StopPodSandbox for \"1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926\" returns successfully" Oct 2 20:10:42.440266 env[1054]: time="2023-10-02T20:10:42.438816985Z" level=info msg="RemovePodSandbox for \"1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926\"" Oct 2 20:10:42.440266 env[1054]: time="2023-10-02T20:10:42.439068433Z" level=info msg="Forcibly stopping sandbox \"1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926\"" Oct 2 20:10:42.440266 env[1054]: time="2023-10-02T20:10:42.439213173Z" level=info msg="TearDown network for sandbox \"1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926\" successfully" Oct 2 20:10:42.446350 env[1054]: time="2023-10-02T20:10:42.446275435Z" level=info msg="RemovePodSandbox \"1c6529197b480c281a38552fdf4727586312ec7dab1b936dbe936d5648dc5926\" returns successfully" Oct 2 20:10:42.447403 env[1054]: time="2023-10-02T20:10:42.447329149Z" level=info msg="StopPodSandbox for \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\"" Oct 2 20:10:42.447601 env[1054]: time="2023-10-02T20:10:42.447515575Z" level=info msg="TearDown network for sandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" successfully" Oct 2 20:10:42.447690 env[1054]: time="2023-10-02T20:10:42.447597999Z" level=info msg="StopPodSandbox for \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" returns successfully" Oct 2 20:10:42.448426 env[1054]: time="2023-10-02T20:10:42.448362042Z" level=info msg="RemovePodSandbox for \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\"" Oct 2 20:10:42.448556 env[1054]: time="2023-10-02T20:10:42.448426382Z" level=info msg="Forcibly stopping sandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\"" Oct 2 20:10:42.448772 env[1054]: time="2023-10-02T20:10:42.448559259Z" level=info msg="TearDown network for sandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" successfully" Oct 2 20:10:42.453887 env[1054]: time="2023-10-02T20:10:42.453780343Z" level=info msg="RemovePodSandbox \"23708fcaa9dcd9a52f164c4d26b0bb2a7fe5644d778266258d81953090bf60da\" returns successfully" Oct 2 20:10:42.714896 kubelet[1928]: E1002 20:10:42.714589 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:46.420771 kubelet[1928]: E1002 20:10:46.419718 1928 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-rwfp2_kube-system(1b33ad21-e620-497b-a97f-394f416faaf1)\"" pod="kube-system/cilium-rwfp2" podUID=1b33ad21-e620-497b-a97f-394f416faaf1 Oct 2 20:10:47.716570 kubelet[1928]: E1002 20:10:47.716519 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:49.381688 env[1054]: time="2023-10-02T20:10:49.381460646Z" level=info msg="StopPodSandbox for \"01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f\"" Oct 2 20:10:49.383187 env[1054]: time="2023-10-02T20:10:49.381807672Z" level=info msg="Container to stop \"69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:10:49.390777 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f-shm.mount: Deactivated successfully. Oct 2 20:10:49.412971 systemd[1]: cri-containerd-01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f.scope: Deactivated successfully. Oct 2 20:10:49.418195 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:10:49.418349 kernel: audit: type=1334 audit(1696277449.412:1389): prog-id=128 op=UNLOAD Oct 2 20:10:49.412000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:10:49.419000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:10:49.422933 kernel: audit: type=1334 audit(1696277449.419:1390): prog-id=131 op=UNLOAD Oct 2 20:10:49.453757 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f-rootfs.mount: Deactivated successfully. Oct 2 20:10:49.471068 env[1054]: time="2023-10-02T20:10:49.470993126Z" level=info msg="shim disconnected" id=01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f Oct 2 20:10:49.471068 env[1054]: time="2023-10-02T20:10:49.471056574Z" level=warning msg="cleaning up after shim disconnected" id=01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f namespace=k8s.io Oct 2 20:10:49.471068 env[1054]: time="2023-10-02T20:10:49.471069118Z" level=info msg="cleaning up dead shim" Oct 2 20:10:49.480025 env[1054]: time="2023-10-02T20:10:49.479958266Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3170 runtime=io.containerd.runc.v2\n" Oct 2 20:10:49.480342 env[1054]: time="2023-10-02T20:10:49.480302047Z" level=info msg="TearDown network for sandbox \"01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f\" successfully" Oct 2 20:10:49.480342 env[1054]: time="2023-10-02T20:10:49.480334396Z" level=info msg="StopPodSandbox for \"01b9e1b273715a7fe6231269a3e91d5e3256022152e6b0e52bd5774ce9a1da1f\" returns successfully" Oct 2 20:10:49.530230 kubelet[1928]: I1002 20:10:49.530152 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-cilium-run\") pod \"1b33ad21-e620-497b-a97f-394f416faaf1\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " Oct 2 20:10:49.531136 kubelet[1928]: I1002 20:10:49.531070 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-host-proc-sys-kernel\") pod \"1b33ad21-e620-497b-a97f-394f416faaf1\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " Oct 2 20:10:49.531249 kubelet[1928]: I1002 20:10:49.531207 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-dgvgn\" (UniqueName: \"kubernetes.io/projected/1b33ad21-e620-497b-a97f-394f416faaf1-kube-api-access-dgvgn\") pod \"1b33ad21-e620-497b-a97f-394f416faaf1\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " Oct 2 20:10:49.531355 kubelet[1928]: I1002 20:10:49.531255 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-etc-cni-netd\") pod \"1b33ad21-e620-497b-a97f-394f416faaf1\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " Oct 2 20:10:49.531355 kubelet[1928]: I1002 20:10:49.531329 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-hostproc\") pod \"1b33ad21-e620-497b-a97f-394f416faaf1\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " Oct 2 20:10:49.531528 kubelet[1928]: I1002 20:10:49.531396 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-cni-path\") pod \"1b33ad21-e620-497b-a97f-394f416faaf1\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " Oct 2 20:10:49.531528 kubelet[1928]: I1002 20:10:49.531439 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-bpf-maps\") pod \"1b33ad21-e620-497b-a97f-394f416faaf1\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " Oct 2 20:10:49.531528 kubelet[1928]: I1002 20:10:49.531517 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/1b33ad21-e620-497b-a97f-394f416faaf1-cilium-ipsec-secrets\") pod \"1b33ad21-e620-497b-a97f-394f416faaf1\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " Oct 2 20:10:49.531727 kubelet[1928]: I1002 20:10:49.531587 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-cilium-cgroup\") pod \"1b33ad21-e620-497b-a97f-394f416faaf1\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " Oct 2 20:10:49.531727 kubelet[1928]: I1002 20:10:49.531658 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-lib-modules\") pod \"1b33ad21-e620-497b-a97f-394f416faaf1\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " Oct 2 20:10:49.531727 kubelet[1928]: I1002 20:10:49.531700 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-xtables-lock\") pod \"1b33ad21-e620-497b-a97f-394f416faaf1\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " Oct 2 20:10:49.532106 kubelet[1928]: I1002 20:10:49.531772 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/1b33ad21-e620-497b-a97f-394f416faaf1-hubble-tls\") pod \"1b33ad21-e620-497b-a97f-394f416faaf1\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " Oct 2 20:10:49.532106 kubelet[1928]: I1002 20:10:49.531850 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/1b33ad21-e620-497b-a97f-394f416faaf1-clustermesh-secrets\") pod \"1b33ad21-e620-497b-a97f-394f416faaf1\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " Oct 2 20:10:49.532106 kubelet[1928]: I1002 20:10:49.531898 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/1b33ad21-e620-497b-a97f-394f416faaf1-cilium-config-path\") pod \"1b33ad21-e620-497b-a97f-394f416faaf1\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " Oct 2 20:10:49.532106 kubelet[1928]: I1002 20:10:49.531976 1928 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-host-proc-sys-net\") pod \"1b33ad21-e620-497b-a97f-394f416faaf1\" (UID: \"1b33ad21-e620-497b-a97f-394f416faaf1\") " Oct 2 20:10:49.532476 kubelet[1928]: I1002 20:10:49.532150 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "1b33ad21-e620-497b-a97f-394f416faaf1" (UID: "1b33ad21-e620-497b-a97f-394f416faaf1"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:49.532476 kubelet[1928]: I1002 20:10:49.530435 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "1b33ad21-e620-497b-a97f-394f416faaf1" (UID: "1b33ad21-e620-497b-a97f-394f416faaf1"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:49.532476 kubelet[1928]: I1002 20:10:49.532244 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "1b33ad21-e620-497b-a97f-394f416faaf1" (UID: "1b33ad21-e620-497b-a97f-394f416faaf1"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:49.532805 kubelet[1928]: I1002 20:10:49.532760 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "1b33ad21-e620-497b-a97f-394f416faaf1" (UID: "1b33ad21-e620-497b-a97f-394f416faaf1"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:49.533021 kubelet[1928]: I1002 20:10:49.532945 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "1b33ad21-e620-497b-a97f-394f416faaf1" (UID: "1b33ad21-e620-497b-a97f-394f416faaf1"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:49.533227 kubelet[1928]: I1002 20:10:49.533190 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-cni-path" (OuterVolumeSpecName: "cni-path") pod "1b33ad21-e620-497b-a97f-394f416faaf1" (UID: "1b33ad21-e620-497b-a97f-394f416faaf1"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:49.533510 kubelet[1928]: I1002 20:10:49.533457 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "1b33ad21-e620-497b-a97f-394f416faaf1" (UID: "1b33ad21-e620-497b-a97f-394f416faaf1"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:49.533622 kubelet[1928]: I1002 20:10:49.533532 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "1b33ad21-e620-497b-a97f-394f416faaf1" (UID: "1b33ad21-e620-497b-a97f-394f416faaf1"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:49.534161 kubelet[1928]: I1002 20:10:49.534116 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-hostproc" (OuterVolumeSpecName: "hostproc") pod "1b33ad21-e620-497b-a97f-394f416faaf1" (UID: "1b33ad21-e620-497b-a97f-394f416faaf1"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:49.534378 kubelet[1928]: I1002 20:10:49.534341 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "1b33ad21-e620-497b-a97f-394f416faaf1" (UID: "1b33ad21-e620-497b-a97f-394f416faaf1"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:49.535095 kubelet[1928]: W1002 20:10:49.535028 1928 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/1b33ad21-e620-497b-a97f-394f416faaf1/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:10:49.541812 kubelet[1928]: I1002 20:10:49.541756 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/1b33ad21-e620-497b-a97f-394f416faaf1-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "1b33ad21-e620-497b-a97f-394f416faaf1" (UID: "1b33ad21-e620-497b-a97f-394f416faaf1"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:10:49.550047 systemd[1]: var-lib-kubelet-pods-1b33ad21\x2de620\x2d497b\x2da97f\x2d394f416faaf1-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2ddgvgn.mount: Deactivated successfully. Oct 2 20:10:49.553153 kubelet[1928]: I1002 20:10:49.553079 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/1b33ad21-e620-497b-a97f-394f416faaf1-kube-api-access-dgvgn" (OuterVolumeSpecName: "kube-api-access-dgvgn") pod "1b33ad21-e620-497b-a97f-394f416faaf1" (UID: "1b33ad21-e620-497b-a97f-394f416faaf1"). InnerVolumeSpecName "kube-api-access-dgvgn". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:10:49.558484 kubelet[1928]: I1002 20:10:49.555802 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/1b33ad21-e620-497b-a97f-394f416faaf1-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "1b33ad21-e620-497b-a97f-394f416faaf1" (UID: "1b33ad21-e620-497b-a97f-394f416faaf1"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:10:49.559996 kubelet[1928]: I1002 20:10:49.559094 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/1b33ad21-e620-497b-a97f-394f416faaf1-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "1b33ad21-e620-497b-a97f-394f416faaf1" (UID: "1b33ad21-e620-497b-a97f-394f416faaf1"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:10:49.559732 systemd[1]: var-lib-kubelet-pods-1b33ad21\x2de620\x2d497b\x2da97f\x2d394f416faaf1-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:10:49.560008 systemd[1]: var-lib-kubelet-pods-1b33ad21\x2de620\x2d497b\x2da97f\x2d394f416faaf1-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:10:49.562627 kubelet[1928]: I1002 20:10:49.562591 1928 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/1b33ad21-e620-497b-a97f-394f416faaf1-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "1b33ad21-e620-497b-a97f-394f416faaf1" (UID: "1b33ad21-e620-497b-a97f-394f416faaf1"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:10:49.565330 systemd[1]: var-lib-kubelet-pods-1b33ad21\x2de620\x2d497b\x2da97f\x2d394f416faaf1-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:10:49.633315 kubelet[1928]: I1002 20:10:49.633146 1928 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-host-proc-sys-kernel\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:10:49.633676 kubelet[1928]: I1002 20:10:49.633617 1928 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-dgvgn\" (UniqueName: \"kubernetes.io/projected/1b33ad21-e620-497b-a97f-394f416faaf1-kube-api-access-dgvgn\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:10:49.633968 kubelet[1928]: I1002 20:10:49.633894 1928 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-etc-cni-netd\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:10:49.634217 kubelet[1928]: I1002 20:10:49.634162 1928 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-hostproc\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:10:49.634411 kubelet[1928]: I1002 20:10:49.634388 1928 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-cni-path\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:10:49.634667 kubelet[1928]: I1002 20:10:49.634615 1928 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-bpf-maps\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:10:49.636542 kubelet[1928]: I1002 20:10:49.636512 1928 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/1b33ad21-e620-497b-a97f-394f416faaf1-cilium-ipsec-secrets\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:10:49.636816 kubelet[1928]: I1002 20:10:49.636760 1928 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-cilium-cgroup\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:10:49.637071 kubelet[1928]: I1002 20:10:49.637018 1928 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-lib-modules\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:10:49.637329 kubelet[1928]: I1002 20:10:49.637274 1928 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-xtables-lock\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:10:49.637633 kubelet[1928]: I1002 20:10:49.637578 1928 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/1b33ad21-e620-497b-a97f-394f416faaf1-hubble-tls\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:10:49.637861 kubelet[1928]: I1002 20:10:49.637810 1928 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/1b33ad21-e620-497b-a97f-394f416faaf1-clustermesh-secrets\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:10:49.638154 kubelet[1928]: I1002 20:10:49.638101 1928 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/1b33ad21-e620-497b-a97f-394f416faaf1-cilium-config-path\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:10:49.638395 kubelet[1928]: I1002 20:10:49.638342 1928 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-host-proc-sys-net\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:10:49.638624 kubelet[1928]: I1002 20:10:49.638576 1928 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/1b33ad21-e620-497b-a97f-394f416faaf1-cilium-run\") on node \"ci-3510-3-0-e-e383a0c9b4.novalocal\" DevicePath \"\"" Oct 2 20:10:49.692774 sshd[2942]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:49.693000 audit[2942]: USER_END pid=2942 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:10:49.707049 kernel: audit: type=1106 audit(1696277449.693:1391): pid=2942 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:10:49.707217 kernel: audit: type=1104 audit(1696277449.693:1392): pid=2942 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:10:49.693000 audit[2942]: CRED_DISP pid=2942 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:10:49.717587 systemd[1]: sshd@29-172.24.4.251:22-172.24.4.1:38986.service: Deactivated successfully. Oct 2 20:10:49.719743 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:10:49.717000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.24.4.251:22-172.24.4.1:38986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:49.721013 systemd[1]: session-30.scope: Consumed 1.544s CPU time. Oct 2 20:10:49.731079 kernel: audit: type=1131 audit(1696277449.717:1393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.24.4.251:22-172.24.4.1:38986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:49.731622 systemd-logind[1043]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:10:49.734391 systemd-logind[1043]: Removed session 30. Oct 2 20:10:49.880333 kubelet[1928]: I1002 20:10:49.880274 1928 scope.go:115] "RemoveContainer" containerID="69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799" Oct 2 20:10:49.888748 env[1054]: time="2023-10-02T20:10:49.886504812Z" level=info msg="RemoveContainer for \"69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799\"" Oct 2 20:10:49.893622 systemd[1]: Removed slice kubepods-burstable-pod1b33ad21_e620_497b_a97f_394f416faaf1.slice. Oct 2 20:10:49.907662 env[1054]: time="2023-10-02T20:10:49.907583514Z" level=info msg="RemoveContainer for \"69973686d762449571e0360676038128bdbfe916a32b3e0aa9d6f5d924fcb799\" returns successfully" Oct 2 20:10:50.422214 kubelet[1928]: I1002 20:10:50.422115 1928 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=1b33ad21-e620-497b-a97f-394f416faaf1 path="/var/lib/kubelet/pods/1b33ad21-e620-497b-a97f-394f416faaf1/volumes" Oct 2 20:10:50.929000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:50.940015 kernel: audit: type=1400 audit(1696277450.929:1394): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:50.940147 kernel: audit: type=1300 audit(1696277450.929:1394): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001232400 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:10:50.929000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001232400 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:10:50.929000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:50.964713 kernel: audit: type=1327 audit(1696277450.929:1394): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:50.930000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:50.930000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001232540 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:10:50.988683 kernel: audit: type=1400 audit(1696277450.930:1395): avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:50.988813 kernel: audit: type=1300 audit(1696277450.930:1395): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001232540 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:10:50.930000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:50.930000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:50.930000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001232560 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:10:50.930000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:50.938000 audit[1817]: AVC avc: denied { watch } for pid=1817 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525365 scontext=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:50.938000 audit[1817]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00130d500 a2=fc6 a3=0 items=0 ppid=1692 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c606,c944 key=(null) Oct 2 20:10:50.938000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:52.719245 kubelet[1928]: E1002 20:10:52.719179 1928 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"