Oct 2 20:22:03.902013 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 20:22:03.902055 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:22:03.902082 kernel: BIOS-provided physical RAM map: Oct 2 20:22:03.902099 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 20:22:03.902114 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 20:22:03.902131 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 20:22:03.902149 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007ffdcfff] usable Oct 2 20:22:03.902166 kernel: BIOS-e820: [mem 0x000000007ffdd000-0x000000007fffffff] reserved Oct 2 20:22:03.902183 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Oct 2 20:22:03.902198 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 20:22:03.902212 kernel: NX (Execute Disable) protection: active Oct 2 20:22:03.902227 kernel: SMBIOS 2.8 present. Oct 2 20:22:03.902242 kernel: DMI: OpenStack Foundation OpenStack Nova, BIOS 1.15.0-1 04/01/2014 Oct 2 20:22:03.902257 kernel: Hypervisor detected: KVM Oct 2 20:22:03.902275 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 20:22:03.902294 kernel: kvm-clock: cpu 0, msr 19f8a001, primary cpu clock Oct 2 20:22:03.907386 kernel: kvm-clock: using sched offset of 5807447885 cycles Oct 2 20:22:03.907408 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 20:22:03.907427 kernel: tsc: Detected 1996.249 MHz processor Oct 2 20:22:03.907445 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 20:22:03.907464 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 20:22:03.907482 kernel: last_pfn = 0x7ffdd max_arch_pfn = 0x400000000 Oct 2 20:22:03.907500 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 20:22:03.907527 kernel: ACPI: Early table checksum verification disabled Oct 2 20:22:03.907544 kernel: ACPI: RSDP 0x00000000000F5930 000014 (v00 BOCHS ) Oct 2 20:22:03.907562 kernel: ACPI: RSDT 0x000000007FFE1848 000030 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:22:03.907580 kernel: ACPI: FACP 0x000000007FFE172C 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:22:03.907597 kernel: ACPI: DSDT 0x000000007FFE0040 0016EC (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:22:03.907615 kernel: ACPI: FACS 0x000000007FFE0000 000040 Oct 2 20:22:03.907632 kernel: ACPI: APIC 0x000000007FFE17A0 000080 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:22:03.907650 kernel: ACPI: WAET 0x000000007FFE1820 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 20:22:03.907667 kernel: ACPI: Reserving FACP table memory at [mem 0x7ffe172c-0x7ffe179f] Oct 2 20:22:03.907689 kernel: ACPI: Reserving DSDT table memory at [mem 0x7ffe0040-0x7ffe172b] Oct 2 20:22:03.907707 kernel: ACPI: Reserving FACS table memory at [mem 0x7ffe0000-0x7ffe003f] Oct 2 20:22:03.907724 kernel: ACPI: Reserving APIC table memory at [mem 0x7ffe17a0-0x7ffe181f] Oct 2 20:22:03.907741 kernel: ACPI: Reserving WAET table memory at [mem 0x7ffe1820-0x7ffe1847] Oct 2 20:22:03.907758 kernel: No NUMA configuration found Oct 2 20:22:03.907775 kernel: Faking a node at [mem 0x0000000000000000-0x000000007ffdcfff] Oct 2 20:22:03.907793 kernel: NODE_DATA(0) allocated [mem 0x7ffd7000-0x7ffdcfff] Oct 2 20:22:03.907811 kernel: Zone ranges: Oct 2 20:22:03.907838 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 20:22:03.907856 kernel: DMA32 [mem 0x0000000001000000-0x000000007ffdcfff] Oct 2 20:22:03.907874 kernel: Normal empty Oct 2 20:22:03.907892 kernel: Movable zone start for each node Oct 2 20:22:03.907910 kernel: Early memory node ranges Oct 2 20:22:03.907928 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 20:22:03.907950 kernel: node 0: [mem 0x0000000000100000-0x000000007ffdcfff] Oct 2 20:22:03.907968 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007ffdcfff] Oct 2 20:22:03.907986 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 20:22:03.908004 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 20:22:03.908022 kernel: On node 0, zone DMA32: 35 pages in unavailable ranges Oct 2 20:22:03.908040 kernel: ACPI: PM-Timer IO Port: 0x608 Oct 2 20:22:03.908058 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 20:22:03.908077 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Oct 2 20:22:03.908095 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Oct 2 20:22:03.908117 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 20:22:03.908135 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 20:22:03.908153 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 20:22:03.908171 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 20:22:03.908189 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 20:22:03.908207 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 20:22:03.908226 kernel: [mem 0x80000000-0xfeffbfff] available for PCI devices Oct 2 20:22:03.908244 kernel: Booting paravirtualized kernel on KVM Oct 2 20:22:03.908262 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 20:22:03.908281 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 20:22:03.908331 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 20:22:03.908350 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 20:22:03.908368 kernel: pcpu-alloc: [0] 0 1 Oct 2 20:22:03.908386 kernel: kvm-guest: stealtime: cpu 0, msr 7dc1c0c0 Oct 2 20:22:03.908404 kernel: kvm-guest: PV spinlocks disabled, no host support Oct 2 20:22:03.908422 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515805 Oct 2 20:22:03.908440 kernel: Policy zone: DMA32 Oct 2 20:22:03.908461 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:22:03.908504 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 20:22:03.908522 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 20:22:03.908541 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 20:22:03.908559 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 20:22:03.908578 kernel: Memory: 1975340K/2096620K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 121020K reserved, 0K cma-reserved) Oct 2 20:22:03.908597 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 20:22:03.908615 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 20:22:03.908633 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 20:22:03.908655 kernel: rcu: Hierarchical RCU implementation. Oct 2 20:22:03.908674 kernel: rcu: RCU event tracing is enabled. Oct 2 20:22:03.908693 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 20:22:03.908712 kernel: Rude variant of Tasks RCU enabled. Oct 2 20:22:03.908730 kernel: Tracing variant of Tasks RCU enabled. Oct 2 20:22:03.908748 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 20:22:03.908767 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 20:22:03.908785 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Oct 2 20:22:03.908803 kernel: Console: colour VGA+ 80x25 Oct 2 20:22:03.908825 kernel: printk: console [tty0] enabled Oct 2 20:22:03.908843 kernel: printk: console [ttyS0] enabled Oct 2 20:22:03.908862 kernel: ACPI: Core revision 20210730 Oct 2 20:22:03.908880 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 20:22:03.908898 kernel: x2apic enabled Oct 2 20:22:03.908916 kernel: Switched APIC routing to physical x2apic. Oct 2 20:22:03.908935 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Oct 2 20:22:03.908953 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Oct 2 20:22:03.908971 kernel: Calibrating delay loop (skipped) preset value.. 3992.49 BogoMIPS (lpj=1996249) Oct 2 20:22:03.908990 kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Oct 2 20:22:03.909012 kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 Oct 2 20:22:03.909030 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 20:22:03.909048 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 20:22:03.909067 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 20:22:03.909085 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 20:22:03.909103 kernel: Speculative Store Bypass: Vulnerable Oct 2 20:22:03.909121 kernel: x86/fpu: x87 FPU will use FXSAVE Oct 2 20:22:03.909139 kernel: Freeing SMP alternatives memory: 32K Oct 2 20:22:03.909157 kernel: pid_max: default: 32768 minimum: 301 Oct 2 20:22:03.909177 kernel: LSM: Security Framework initializing Oct 2 20:22:03.909195 kernel: SELinux: Initializing. Oct 2 20:22:03.909220 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 20:22:03.909250 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 20:22:03.909274 kernel: smpboot: CPU0: AMD Intel Core i7 9xx (Nehalem Class Core i7) (family: 0x6, model: 0x1a, stepping: 0x3) Oct 2 20:22:03.909291 kernel: Performance Events: AMD PMU driver. Oct 2 20:22:03.909334 kernel: ... version: 0 Oct 2 20:22:03.909351 kernel: ... bit width: 48 Oct 2 20:22:03.909368 kernel: ... generic registers: 4 Oct 2 20:22:03.909402 kernel: ... value mask: 0000ffffffffffff Oct 2 20:22:03.909420 kernel: ... max period: 00007fffffffffff Oct 2 20:22:03.909440 kernel: ... fixed-purpose events: 0 Oct 2 20:22:03.909458 kernel: ... event mask: 000000000000000f Oct 2 20:22:03.909475 kernel: signal: max sigframe size: 1440 Oct 2 20:22:03.909492 kernel: rcu: Hierarchical SRCU implementation. Oct 2 20:22:03.909510 kernel: smp: Bringing up secondary CPUs ... Oct 2 20:22:03.909527 kernel: x86: Booting SMP configuration: Oct 2 20:22:03.909548 kernel: .... node #0, CPUs: #1 Oct 2 20:22:03.909566 kernel: kvm-clock: cpu 1, msr 19f8a041, secondary cpu clock Oct 2 20:22:03.909583 kernel: kvm-guest: stealtime: cpu 1, msr 7dd1c0c0 Oct 2 20:22:03.909600 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 20:22:03.909618 kernel: smpboot: Max logical packages: 2 Oct 2 20:22:03.909636 kernel: smpboot: Total of 2 processors activated (7984.99 BogoMIPS) Oct 2 20:22:03.909654 kernel: devtmpfs: initialized Oct 2 20:22:03.909671 kernel: x86/mm: Memory block size: 128MB Oct 2 20:22:03.909689 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 20:22:03.909710 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 20:22:03.909727 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 20:22:03.909745 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 20:22:03.909763 kernel: audit: initializing netlink subsys (disabled) Oct 2 20:22:03.909781 kernel: audit: type=2000 audit(1696278123.054:1): state=initialized audit_enabled=0 res=1 Oct 2 20:22:03.909798 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 20:22:03.909816 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 20:22:03.909833 kernel: cpuidle: using governor menu Oct 2 20:22:03.909850 kernel: ACPI: bus type PCI registered Oct 2 20:22:03.909871 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 20:22:03.909888 kernel: dca service started, version 1.12.1 Oct 2 20:22:03.909906 kernel: PCI: Using configuration type 1 for base access Oct 2 20:22:03.909924 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 20:22:03.909942 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 20:22:03.909960 kernel: ACPI: Added _OSI(Module Device) Oct 2 20:22:03.909978 kernel: ACPI: Added _OSI(Processor Device) Oct 2 20:22:03.909995 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 20:22:03.910013 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 20:22:03.910034 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 20:22:03.910051 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 20:22:03.910069 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 20:22:03.910087 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 20:22:03.910104 kernel: ACPI: Interpreter enabled Oct 2 20:22:03.910122 kernel: ACPI: PM: (supports S0 S3 S5) Oct 2 20:22:03.910140 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 20:22:03.910158 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 20:22:03.910176 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Oct 2 20:22:03.910196 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 20:22:03.910482 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Oct 2 20:22:03.910677 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Oct 2 20:22:03.910705 kernel: acpiphp: Slot [3] registered Oct 2 20:22:03.910723 kernel: acpiphp: Slot [4] registered Oct 2 20:22:03.910741 kernel: acpiphp: Slot [5] registered Oct 2 20:22:03.910758 kernel: acpiphp: Slot [6] registered Oct 2 20:22:03.910782 kernel: acpiphp: Slot [7] registered Oct 2 20:22:03.910799 kernel: acpiphp: Slot [8] registered Oct 2 20:22:03.910817 kernel: acpiphp: Slot [9] registered Oct 2 20:22:03.910834 kernel: acpiphp: Slot [10] registered Oct 2 20:22:03.910852 kernel: acpiphp: Slot [11] registered Oct 2 20:22:03.910870 kernel: acpiphp: Slot [12] registered Oct 2 20:22:03.910887 kernel: acpiphp: Slot [13] registered Oct 2 20:22:03.910904 kernel: acpiphp: Slot [14] registered Oct 2 20:22:03.910922 kernel: acpiphp: Slot [15] registered Oct 2 20:22:03.910939 kernel: acpiphp: Slot [16] registered Oct 2 20:22:03.910959 kernel: acpiphp: Slot [17] registered Oct 2 20:22:03.910977 kernel: acpiphp: Slot [18] registered Oct 2 20:22:03.910994 kernel: acpiphp: Slot [19] registered Oct 2 20:22:03.911011 kernel: acpiphp: Slot [20] registered Oct 2 20:22:03.911029 kernel: acpiphp: Slot [21] registered Oct 2 20:22:03.911046 kernel: acpiphp: Slot [22] registered Oct 2 20:22:03.911063 kernel: acpiphp: Slot [23] registered Oct 2 20:22:03.911081 kernel: acpiphp: Slot [24] registered Oct 2 20:22:03.911098 kernel: acpiphp: Slot [25] registered Oct 2 20:22:03.911118 kernel: acpiphp: Slot [26] registered Oct 2 20:22:03.911136 kernel: acpiphp: Slot [27] registered Oct 2 20:22:03.911153 kernel: acpiphp: Slot [28] registered Oct 2 20:22:03.911171 kernel: acpiphp: Slot [29] registered Oct 2 20:22:03.911188 kernel: acpiphp: Slot [30] registered Oct 2 20:22:03.911205 kernel: acpiphp: Slot [31] registered Oct 2 20:22:03.911223 kernel: PCI host bridge to bus 0000:00 Oct 2 20:22:03.914537 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 20:22:03.914732 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 20:22:03.914922 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 20:22:03.915096 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Oct 2 20:22:03.915262 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Oct 2 20:22:03.915501 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 20:22:03.915729 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 20:22:03.915971 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 20:22:03.916177 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Oct 2 20:22:03.918452 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc120-0xc12f] Oct 2 20:22:03.918652 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Oct 2 20:22:03.918836 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Oct 2 20:22:03.919021 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Oct 2 20:22:03.919201 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Oct 2 20:22:03.920556 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Oct 2 20:22:03.920780 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Oct 2 20:22:03.920977 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Oct 2 20:22:03.921187 kernel: pci 0000:00:02.0: [1af4:1050] type 00 class 0x030000 Oct 2 20:22:03.921431 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfe000000-0xfe7fffff pref] Oct 2 20:22:03.921634 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfe800000-0xfe803fff 64bit pref] Oct 2 20:22:03.921829 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfeb90000-0xfeb90fff] Oct 2 20:22:03.922034 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfeb80000-0xfeb8ffff pref] Oct 2 20:22:03.922227 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 20:22:03.926494 kernel: pci 0000:00:03.0: [1af4:1000] type 00 class 0x020000 Oct 2 20:22:03.926677 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc0bf] Oct 2 20:22:03.926863 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfeb91000-0xfeb91fff] Oct 2 20:22:03.927032 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe804000-0xfe807fff 64bit pref] Oct 2 20:22:03.927199 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfeb00000-0xfeb7ffff pref] Oct 2 20:22:03.927421 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Oct 2 20:22:03.927595 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Oct 2 20:22:03.927758 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfeb92000-0xfeb92fff] Oct 2 20:22:03.927924 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe808000-0xfe80bfff 64bit pref] Oct 2 20:22:03.928101 kernel: pci 0000:00:05.0: [1af4:1002] type 00 class 0x00ff00 Oct 2 20:22:03.928270 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0c0-0xc0ff] Oct 2 20:22:03.928490 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe80c000-0xfe80ffff 64bit pref] Oct 2 20:22:03.928721 kernel: pci 0000:00:06.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 20:22:03.928905 kernel: pci 0000:00:06.0: reg 0x10: [io 0xc100-0xc11f] Oct 2 20:22:03.929076 kernel: pci 0000:00:06.0: reg 0x20: [mem 0xfe810000-0xfe813fff 64bit pref] Oct 2 20:22:03.929101 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 20:22:03.929119 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 20:22:03.929135 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 20:22:03.929152 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 20:22:03.929168 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 20:22:03.929189 kernel: iommu: Default domain type: Translated Oct 2 20:22:03.929201 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 20:22:03.929284 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Oct 2 20:22:03.929386 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 20:22:03.929470 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Oct 2 20:22:03.929482 kernel: vgaarb: loaded Oct 2 20:22:03.929490 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 20:22:03.929499 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 20:22:03.929507 kernel: PTP clock support registered Oct 2 20:22:03.929518 kernel: PCI: Using ACPI for IRQ routing Oct 2 20:22:03.929526 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 20:22:03.929535 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 20:22:03.929543 kernel: e820: reserve RAM buffer [mem 0x7ffdd000-0x7fffffff] Oct 2 20:22:03.929551 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 20:22:03.929559 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 20:22:03.929567 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 20:22:03.929575 kernel: pnp: PnP ACPI init Oct 2 20:22:03.929661 kernel: pnp 00:03: [dma 2] Oct 2 20:22:03.929678 kernel: pnp: PnP ACPI: found 5 devices Oct 2 20:22:03.929686 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 20:22:03.929694 kernel: NET: Registered PF_INET protocol family Oct 2 20:22:03.929703 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 20:22:03.929711 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Oct 2 20:22:03.929719 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 20:22:03.929728 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 20:22:03.929736 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Oct 2 20:22:03.929746 kernel: TCP: Hash tables configured (established 16384 bind 16384) Oct 2 20:22:03.929754 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 20:22:03.929763 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 20:22:03.929771 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 20:22:03.929779 kernel: NET: Registered PF_XDP protocol family Oct 2 20:22:03.929856 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 20:22:03.929937 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 20:22:03.930011 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 20:22:03.930083 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Oct 2 20:22:03.930160 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Oct 2 20:22:03.930243 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Oct 2 20:22:03.932425 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 20:22:03.932562 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 20:22:03.932577 kernel: PCI: CLS 0 bytes, default 64 Oct 2 20:22:03.932585 kernel: Initialise system trusted keyrings Oct 2 20:22:03.932594 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Oct 2 20:22:03.932614 kernel: Key type asymmetric registered Oct 2 20:22:03.932622 kernel: Asymmetric key parser 'x509' registered Oct 2 20:22:03.932630 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 20:22:03.932638 kernel: io scheduler mq-deadline registered Oct 2 20:22:03.932647 kernel: io scheduler kyber registered Oct 2 20:22:03.932655 kernel: io scheduler bfq registered Oct 2 20:22:03.932663 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 20:22:03.932671 kernel: ACPI: \_SB_.LNKB: Enabled at IRQ 10 Oct 2 20:22:03.932680 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Oct 2 20:22:03.932688 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Oct 2 20:22:03.932698 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Oct 2 20:22:03.932706 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 20:22:03.932714 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 20:22:03.932722 kernel: random: crng init done Oct 2 20:22:03.932730 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 20:22:03.932738 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 20:22:03.932746 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 20:22:03.932864 kernel: rtc_cmos 00:04: RTC can wake from S4 Oct 2 20:22:03.932881 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 20:22:03.932957 kernel: rtc_cmos 00:04: registered as rtc0 Oct 2 20:22:03.933033 kernel: rtc_cmos 00:04: setting system clock to 2023-10-02T20:22:03 UTC (1696278123) Oct 2 20:22:03.933107 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram Oct 2 20:22:03.933119 kernel: NET: Registered PF_INET6 protocol family Oct 2 20:22:03.933127 kernel: Segment Routing with IPv6 Oct 2 20:22:03.933135 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 20:22:03.933143 kernel: NET: Registered PF_PACKET protocol family Oct 2 20:22:03.933151 kernel: Key type dns_resolver registered Oct 2 20:22:03.933162 kernel: IPI shorthand broadcast: enabled Oct 2 20:22:03.933170 kernel: sched_clock: Marking stable (720195880, 116490316)->(863725798, -27039602) Oct 2 20:22:03.933179 kernel: registered taskstats version 1 Oct 2 20:22:03.933187 kernel: Loading compiled-in X.509 certificates Oct 2 20:22:03.933195 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 20:22:03.933203 kernel: Key type .fscrypt registered Oct 2 20:22:03.933211 kernel: Key type fscrypt-provisioning registered Oct 2 20:22:03.933219 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 20:22:03.933235 kernel: ima: Allocated hash algorithm: sha1 Oct 2 20:22:03.933243 kernel: ima: No architecture policies found Oct 2 20:22:03.933251 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 20:22:03.933260 kernel: Write protecting the kernel read-only data: 28672k Oct 2 20:22:03.933268 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 20:22:03.933276 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 20:22:03.933284 kernel: Run /init as init process Oct 2 20:22:03.933292 kernel: with arguments: Oct 2 20:22:03.937342 kernel: /init Oct 2 20:22:03.937361 kernel: with environment: Oct 2 20:22:03.937369 kernel: HOME=/ Oct 2 20:22:03.937377 kernel: TERM=linux Oct 2 20:22:03.937385 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 20:22:03.937397 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:22:03.937408 systemd[1]: Detected virtualization kvm. Oct 2 20:22:03.937417 systemd[1]: Detected architecture x86-64. Oct 2 20:22:03.937426 systemd[1]: Running in initrd. Oct 2 20:22:03.937436 systemd[1]: No hostname configured, using default hostname. Oct 2 20:22:03.937444 systemd[1]: Hostname set to . Oct 2 20:22:03.937454 systemd[1]: Initializing machine ID from VM UUID. Oct 2 20:22:03.937463 systemd[1]: Queued start job for default target initrd.target. Oct 2 20:22:03.937471 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:22:03.937480 systemd[1]: Reached target cryptsetup.target. Oct 2 20:22:03.937488 systemd[1]: Reached target paths.target. Oct 2 20:22:03.937496 systemd[1]: Reached target slices.target. Oct 2 20:22:03.937506 systemd[1]: Reached target swap.target. Oct 2 20:22:03.937515 systemd[1]: Reached target timers.target. Oct 2 20:22:03.937524 systemd[1]: Listening on iscsid.socket. Oct 2 20:22:03.937532 systemd[1]: Listening on iscsiuio.socket. Oct 2 20:22:03.937541 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 20:22:03.937549 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 20:22:03.937558 systemd[1]: Listening on systemd-journald.socket. Oct 2 20:22:03.937566 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:22:03.937576 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:22:03.937585 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:22:03.937593 systemd[1]: Reached target sockets.target. Oct 2 20:22:03.937602 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:22:03.937618 systemd[1]: Finished network-cleanup.service. Oct 2 20:22:03.937628 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 20:22:03.937638 systemd[1]: Starting systemd-journald.service... Oct 2 20:22:03.937647 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:22:03.937656 systemd[1]: Starting systemd-resolved.service... Oct 2 20:22:03.937665 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 20:22:03.937673 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:22:03.937682 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 20:22:03.937695 systemd-journald[184]: Journal started Oct 2 20:22:03.937762 systemd-journald[184]: Runtime Journal (/run/log/journal/f9a058df4ac54a36808123952d5e144c) is 4.9M, max 39.5M, 34.5M free. Oct 2 20:22:03.895497 systemd-modules-load[185]: Inserted module 'overlay' Oct 2 20:22:03.962839 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 20:22:03.962861 kernel: Bridge firewalling registered Oct 2 20:22:03.962886 systemd[1]: Started systemd-journald.service. Oct 2 20:22:03.962902 kernel: audit: type=1130 audit(1696278123.957:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:03.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:03.945046 systemd-resolved[186]: Positive Trust Anchors: Oct 2 20:22:03.945055 systemd-resolved[186]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:22:03.945092 systemd-resolved[186]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:22:03.987655 kernel: audit: type=1130 audit(1696278123.966:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:03.987675 kernel: audit: type=1130 audit(1696278123.967:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:03.987687 kernel: audit: type=1130 audit(1696278123.967:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:03.987698 kernel: SCSI subsystem initialized Oct 2 20:22:03.966000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:03.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:03.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:03.947936 systemd-resolved[186]: Defaulting to hostname 'linux'. Oct 2 20:22:03.951160 systemd-modules-load[185]: Inserted module 'br_netfilter' Oct 2 20:22:03.967253 systemd[1]: Started systemd-resolved.service. Oct 2 20:22:03.967854 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 20:22:03.968378 systemd[1]: Reached target nss-lookup.target. Oct 2 20:22:03.972693 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 20:22:03.989837 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:22:04.005687 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 20:22:04.005712 kernel: audit: type=1130 audit(1696278123.999:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:04.005724 kernel: device-mapper: uevent: version 1.0.3 Oct 2 20:22:04.005739 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 20:22:03.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:03.999267 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:22:04.006507 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 20:22:04.020228 kernel: audit: type=1130 audit(1696278124.006:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:04.020251 kernel: audit: type=1130 audit(1696278124.015:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:04.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:04.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:04.007692 systemd[1]: Starting dracut-cmdline.service... Oct 2 20:22:04.010610 systemd-modules-load[185]: Inserted module 'dm_multipath' Oct 2 20:22:04.011320 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:22:04.019680 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:22:04.024809 dracut-cmdline[201]: dracut-dracut-053 Oct 2 20:22:04.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:04.029939 dracut-cmdline[201]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:22:04.031906 kernel: audit: type=1130 audit(1696278124.026:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:04.026152 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:22:04.082323 kernel: Loading iSCSI transport class v2.0-870. Oct 2 20:22:04.095318 kernel: iscsi: registered transport (tcp) Oct 2 20:22:04.118329 kernel: iscsi: registered transport (qla4xxx) Oct 2 20:22:04.118365 kernel: QLogic iSCSI HBA Driver Oct 2 20:22:04.163226 systemd[1]: Finished dracut-cmdline.service. Oct 2 20:22:04.175249 kernel: audit: type=1130 audit(1696278124.163:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:04.163000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:04.164515 systemd[1]: Starting dracut-pre-udev.service... Oct 2 20:22:04.223391 kernel: raid6: sse2x4 gen() 13252 MB/s Oct 2 20:22:04.240387 kernel: raid6: sse2x4 xor() 7253 MB/s Oct 2 20:22:04.257385 kernel: raid6: sse2x2 gen() 14745 MB/s Oct 2 20:22:04.274387 kernel: raid6: sse2x2 xor() 8688 MB/s Oct 2 20:22:04.291388 kernel: raid6: sse2x1 gen() 11336 MB/s Oct 2 20:22:04.309246 kernel: raid6: sse2x1 xor() 6948 MB/s Oct 2 20:22:04.309352 kernel: raid6: using algorithm sse2x2 gen() 14745 MB/s Oct 2 20:22:04.309383 kernel: raid6: .... xor() 8688 MB/s, rmw enabled Oct 2 20:22:04.310045 kernel: raid6: using ssse3x2 recovery algorithm Oct 2 20:22:04.324390 kernel: xor: measuring software checksum speed Oct 2 20:22:04.326347 kernel: prefetch64-sse : 17234 MB/sec Oct 2 20:22:04.326405 kernel: generic_sse : 16382 MB/sec Oct 2 20:22:04.328211 kernel: xor: using function: prefetch64-sse (17234 MB/sec) Oct 2 20:22:04.439348 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 20:22:04.453626 systemd[1]: Finished dracut-pre-udev.service. Oct 2 20:22:04.453000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:04.454000 audit: BPF prog-id=7 op=LOAD Oct 2 20:22:04.454000 audit: BPF prog-id=8 op=LOAD Oct 2 20:22:04.455071 systemd[1]: Starting systemd-udevd.service... Oct 2 20:22:04.468192 systemd-udevd[386]: Using default interface naming scheme 'v252'. Oct 2 20:22:04.473034 systemd[1]: Started systemd-udevd.service. Oct 2 20:22:04.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:04.478976 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 20:22:04.502065 dracut-pre-trigger[402]: rd.md=0: removing MD RAID activation Oct 2 20:22:04.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:04.548522 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 20:22:04.551210 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:22:04.608446 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:22:04.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:04.674315 kernel: virtio_blk virtio2: [vda] 41943040 512-byte logical blocks (21.5 GB/20.0 GiB) Oct 2 20:22:04.689316 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 20:22:04.689348 kernel: GPT:17805311 != 41943039 Oct 2 20:22:04.689359 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 20:22:04.689370 kernel: GPT:17805311 != 41943039 Oct 2 20:22:04.689379 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 20:22:04.689389 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 20:22:04.709332 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (433) Oct 2 20:22:04.725609 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 20:22:04.742024 kernel: libata version 3.00 loaded. Oct 2 20:22:04.742044 kernel: ata_piix 0000:00:01.1: version 2.13 Oct 2 20:22:04.742862 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 20:22:04.746984 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 20:22:04.749318 kernel: scsi host0: ata_piix Oct 2 20:22:04.750987 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 20:22:04.755461 kernel: scsi host1: ata_piix Oct 2 20:22:04.755580 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc120 irq 14 Oct 2 20:22:04.755593 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc128 irq 15 Oct 2 20:22:04.756278 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:22:04.757477 systemd[1]: Starting disk-uuid.service... Oct 2 20:22:04.773690 disk-uuid[459]: Primary Header is updated. Oct 2 20:22:04.773690 disk-uuid[459]: Secondary Entries is updated. Oct 2 20:22:04.773690 disk-uuid[459]: Secondary Header is updated. Oct 2 20:22:04.784348 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 20:22:04.789351 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 20:22:05.798371 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 20:22:05.798464 disk-uuid[460]: The operation has completed successfully. Oct 2 20:22:05.863983 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 20:22:05.865919 systemd[1]: Finished disk-uuid.service. Oct 2 20:22:05.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:05.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:05.885941 systemd[1]: Starting verity-setup.service... Oct 2 20:22:05.913382 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 20:22:06.000623 systemd[1]: Found device dev-mapper-usr.device. Oct 2 20:22:06.003451 systemd[1]: Mounting sysusr-usr.mount... Oct 2 20:22:06.007047 systemd[1]: Finished verity-setup.service. Oct 2 20:22:06.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:06.180776 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 20:22:06.181060 systemd[1]: Mounted sysusr-usr.mount. Oct 2 20:22:06.181659 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 20:22:06.182393 systemd[1]: Starting ignition-setup.service... Oct 2 20:22:06.185143 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 20:22:06.201164 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:22:06.201211 kernel: BTRFS info (device vda6): using free space tree Oct 2 20:22:06.201222 kernel: BTRFS info (device vda6): has skinny extents Oct 2 20:22:06.215916 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 20:22:06.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:06.230032 systemd[1]: Finished ignition-setup.service. Oct 2 20:22:06.231244 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 20:22:06.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:06.302000 audit: BPF prog-id=9 op=LOAD Oct 2 20:22:06.301403 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 20:22:06.303587 systemd[1]: Starting systemd-networkd.service... Oct 2 20:22:06.327218 systemd-networkd[631]: lo: Link UP Oct 2 20:22:06.327229 systemd-networkd[631]: lo: Gained carrier Oct 2 20:22:06.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:06.327689 systemd-networkd[631]: Enumeration completed Oct 2 20:22:06.327765 systemd[1]: Started systemd-networkd.service. Oct 2 20:22:06.328029 systemd-networkd[631]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:22:06.328754 systemd[1]: Reached target network.target. Oct 2 20:22:06.330928 systemd[1]: Starting iscsiuio.service... Oct 2 20:22:06.331164 systemd-networkd[631]: eth0: Link UP Oct 2 20:22:06.331168 systemd-networkd[631]: eth0: Gained carrier Oct 2 20:22:06.337106 systemd[1]: Started iscsiuio.service. Oct 2 20:22:06.337000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:06.338256 systemd[1]: Starting iscsid.service... Oct 2 20:22:06.341743 iscsid[636]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:22:06.341743 iscsid[636]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 20:22:06.341743 iscsid[636]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 20:22:06.341743 iscsid[636]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 20:22:06.341743 iscsid[636]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:22:06.343000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:06.355534 iscsid[636]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 20:22:06.342920 systemd[1]: Started iscsid.service. Oct 2 20:22:06.345142 systemd[1]: Starting dracut-initqueue.service... Oct 2 20:22:06.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:06.354380 systemd-networkd[631]: eth0: DHCPv4 address 172.24.4.85/24, gateway 172.24.4.1 acquired from 172.24.4.1 Oct 2 20:22:06.358139 systemd[1]: Finished dracut-initqueue.service. Oct 2 20:22:06.358710 systemd[1]: Reached target remote-fs-pre.target. Oct 2 20:22:06.360772 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:22:06.362648 systemd[1]: Reached target remote-fs.target. Oct 2 20:22:06.363862 systemd[1]: Starting dracut-pre-mount.service... Oct 2 20:22:06.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:06.372893 systemd[1]: Finished dracut-pre-mount.service. Oct 2 20:22:06.638594 ignition[550]: Ignition 2.14.0 Oct 2 20:22:06.640254 ignition[550]: Stage: fetch-offline Oct 2 20:22:06.641567 ignition[550]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:22:06.641669 ignition[550]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 20:22:06.644616 ignition[550]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 20:22:06.644908 ignition[550]: parsed url from cmdline: "" Oct 2 20:22:06.647228 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 20:22:06.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:06.644918 ignition[550]: no config URL provided Oct 2 20:22:06.644932 ignition[550]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:22:06.650204 systemd[1]: Starting ignition-fetch.service... Oct 2 20:22:06.644952 ignition[550]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:22:06.644965 ignition[550]: failed to fetch config: resource requires networking Oct 2 20:22:06.645197 ignition[550]: Ignition finished successfully Oct 2 20:22:06.670613 ignition[655]: Ignition 2.14.0 Oct 2 20:22:06.670641 ignition[655]: Stage: fetch Oct 2 20:22:06.670872 ignition[655]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:22:06.670915 ignition[655]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 20:22:06.673186 ignition[655]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 20:22:06.673467 ignition[655]: parsed url from cmdline: "" Oct 2 20:22:06.673478 ignition[655]: no config URL provided Oct 2 20:22:06.673492 ignition[655]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:22:06.673511 ignition[655]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:22:06.676366 ignition[655]: config drive ("/dev/disk/by-label/config-2") not found. Waiting... Oct 2 20:22:06.676413 ignition[655]: GET http://169.254.169.254/openstack/latest/user_data: attempt #1 Oct 2 20:22:06.676639 ignition[655]: config drive ("/dev/disk/by-label/CONFIG-2") not found. Waiting... Oct 2 20:22:07.047793 ignition[655]: GET result: OK Oct 2 20:22:07.048018 ignition[655]: parsing config with SHA512: 03a46d0416789e4a8977ddf153101f3360734e05f806abafb87aaf164926f99df9f30dba45e1b94f88e799256529724b84709b8b0b40543bd955010e345fb9c9 Oct 2 20:22:07.128088 unknown[655]: fetched base config from "system" Oct 2 20:22:07.128125 unknown[655]: fetched base config from "system" Oct 2 20:22:07.129499 ignition[655]: fetch: fetch complete Oct 2 20:22:07.128141 unknown[655]: fetched user config from "openstack" Oct 2 20:22:07.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:07.129513 ignition[655]: fetch: fetch passed Oct 2 20:22:07.133171 systemd[1]: Finished ignition-fetch.service. Oct 2 20:22:07.129608 ignition[655]: Ignition finished successfully Oct 2 20:22:07.136818 systemd[1]: Starting ignition-kargs.service... Oct 2 20:22:07.162141 ignition[661]: Ignition 2.14.0 Oct 2 20:22:07.162169 ignition[661]: Stage: kargs Oct 2 20:22:07.162443 ignition[661]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:22:07.162493 ignition[661]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 20:22:07.164713 ignition[661]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 20:22:07.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:07.177428 systemd[1]: Finished ignition-kargs.service. Oct 2 20:22:07.167614 ignition[661]: kargs: kargs passed Oct 2 20:22:07.167705 ignition[661]: Ignition finished successfully Oct 2 20:22:07.180674 systemd[1]: Starting ignition-disks.service... Oct 2 20:22:07.197534 ignition[666]: Ignition 2.14.0 Oct 2 20:22:07.197560 ignition[666]: Stage: disks Oct 2 20:22:07.197800 ignition[666]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:22:07.197841 ignition[666]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 20:22:07.200038 ignition[666]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 20:22:07.203017 ignition[666]: disks: disks passed Oct 2 20:22:07.203119 ignition[666]: Ignition finished successfully Oct 2 20:22:07.204217 systemd[1]: Finished ignition-disks.service. Oct 2 20:22:07.205000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:07.205930 systemd[1]: Reached target initrd-root-device.target. Oct 2 20:22:07.207268 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:22:07.208822 systemd[1]: Reached target local-fs.target. Oct 2 20:22:07.210284 systemd[1]: Reached target sysinit.target. Oct 2 20:22:07.211730 systemd[1]: Reached target basic.target. Oct 2 20:22:07.214952 systemd[1]: Starting systemd-fsck-root.service... Oct 2 20:22:07.233924 systemd-fsck[673]: ROOT: clean, 603/1628000 files, 124049/1617920 blocks Oct 2 20:22:07.241946 systemd[1]: Finished systemd-fsck-root.service. Oct 2 20:22:07.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:07.244008 systemd[1]: Mounting sysroot.mount... Oct 2 20:22:07.266264 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 20:22:07.265822 systemd[1]: Mounted sysroot.mount. Oct 2 20:22:07.266895 systemd[1]: Reached target initrd-root-fs.target. Oct 2 20:22:07.269212 systemd[1]: Mounting sysroot-usr.mount... Oct 2 20:22:07.270549 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 20:22:07.271903 systemd[1]: Starting flatcar-openstack-hostname.service... Oct 2 20:22:07.272948 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 20:22:07.273864 systemd[1]: Reached target ignition-diskful.target. Oct 2 20:22:07.275807 systemd[1]: Mounted sysroot-usr.mount. Oct 2 20:22:07.280846 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:22:07.282514 systemd[1]: Starting initrd-setup-root.service... Oct 2 20:22:07.295317 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/vda6 scanned by mount (680) Oct 2 20:22:07.296200 initrd-setup-root[685]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 20:22:07.301700 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:22:07.301728 kernel: BTRFS info (device vda6): using free space tree Oct 2 20:22:07.301739 kernel: BTRFS info (device vda6): has skinny extents Oct 2 20:22:07.312441 initrd-setup-root[709]: cut: /sysroot/etc/group: No such file or directory Oct 2 20:22:07.324207 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:22:07.327875 initrd-setup-root[719]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 20:22:07.336603 initrd-setup-root[727]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 20:22:07.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:07.439549 systemd[1]: Finished initrd-setup-root.service. Oct 2 20:22:07.442289 systemd[1]: Starting ignition-mount.service... Oct 2 20:22:07.450743 systemd[1]: Starting sysroot-boot.service... Oct 2 20:22:07.458792 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 20:22:07.459027 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 20:22:07.511275 ignition[747]: INFO : Ignition 2.14.0 Oct 2 20:22:07.512116 ignition[747]: INFO : Stage: mount Oct 2 20:22:07.512923 ignition[747]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:22:07.513685 ignition[747]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 20:22:07.516798 ignition[747]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 20:22:07.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:07.519445 systemd[1]: Finished sysroot-boot.service. Oct 2 20:22:07.521940 ignition[747]: INFO : mount: mount passed Oct 2 20:22:07.521940 ignition[747]: INFO : Ignition finished successfully Oct 2 20:22:07.522199 systemd[1]: Finished ignition-mount.service. Oct 2 20:22:07.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:07.558944 coreos-metadata[679]: Oct 02 20:22:07.558 INFO Fetching http://169.254.169.254/latest/meta-data/hostname: Attempt #1 Oct 2 20:22:07.577183 coreos-metadata[679]: Oct 02 20:22:07.577 INFO Fetch successful Oct 2 20:22:07.577757 coreos-metadata[679]: Oct 02 20:22:07.577 INFO wrote hostname ci-3510-3-0-7-ba0a608fa7.novalocal to /sysroot/etc/hostname Oct 2 20:22:07.583722 systemd[1]: flatcar-openstack-hostname.service: Deactivated successfully. Oct 2 20:22:07.583900 systemd[1]: Finished flatcar-openstack-hostname.service. Oct 2 20:22:07.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:07.585000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:07.587570 systemd[1]: Starting ignition-files.service... Oct 2 20:22:07.600897 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:22:07.614397 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/vda6 scanned by mount (756) Oct 2 20:22:07.624336 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:22:07.624408 kernel: BTRFS info (device vda6): using free space tree Oct 2 20:22:07.624429 kernel: BTRFS info (device vda6): has skinny extents Oct 2 20:22:07.641268 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:22:07.660680 ignition[775]: INFO : Ignition 2.14.0 Oct 2 20:22:07.660680 ignition[775]: INFO : Stage: files Oct 2 20:22:07.663028 ignition[775]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:22:07.663028 ignition[775]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 20:22:07.666990 ignition[775]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 20:22:07.668544 ignition[775]: DEBUG : files: compiled without relabeling support, skipping Oct 2 20:22:07.670083 ignition[775]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 20:22:07.670083 ignition[775]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 20:22:07.679061 ignition[775]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 20:22:07.681129 ignition[775]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 20:22:07.683712 unknown[775]: wrote ssh authorized keys file for user: core Oct 2 20:22:07.686938 ignition[775]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 20:22:07.686938 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 20:22:07.686938 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 20:22:07.722847 systemd-networkd[631]: eth0: Gained IPv6LL Oct 2 20:22:08.156401 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 20:22:09.265145 ignition[775]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 20:22:09.268915 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 20:22:09.268915 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 20:22:09.268915 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-amd64.tar.gz: attempt #1 Oct 2 20:22:09.606649 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 20:22:10.053956 ignition[775]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: a3a2c02a90b008686c20babaf272e703924db2a3e2a0d4e2a7c81d994cbc68c47458a4a354ecc243af095b390815c7f203348b9749351ae817bd52a522300449 Oct 2 20:22:10.053956 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 20:22:10.059834 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:22:10.059834 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubeadm: attempt #1 Oct 2 20:22:10.220783 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 20:22:11.750886 ignition[775]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 1c324cd645a7bf93d19d24c87498d9a17878eb1cc927e2680200ffeab2f85051ddec47d85b79b8e774042dc6726299ad3d7caf52c060701f00deba30dc33f660 Oct 2 20:22:11.763711 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:22:11.763711 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:22:11.763711 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubelet: attempt #1 Oct 2 20:22:11.906786 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 20:22:14.730221 ignition[775]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 40daf2a9b9e666c14b10e627da931bd79978628b1f23ef6429c1cb4fcba261f86ccff440c0dbb0070ee760fe55772b4fd279c4582dfbb17fa30bc94b7f00126b Oct 2 20:22:14.733937 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:22:14.733937 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:22:14.733937 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubectl: attempt #1 Oct 2 20:22:14.898305 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 20:22:16.690516 ignition[775]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 97840854134909d75a1a2563628cc4ba632067369ce7fc8a8a1e90a387d32dd7bfd73f4f5b5a82ef842088e7470692951eb7fc869c5f297dd740f855672ee628 Oct 2 20:22:16.694225 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:22:16.694225 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:22:16.694225 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:22:16.694225 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:22:16.694225 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 20:22:17.045375 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 20:22:17.632055 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:22:17.634445 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 20:22:17.636967 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 20:22:17.639517 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:22:17.639517 ignition[775]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:22:17.639517 ignition[775]: INFO : files: op(c): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 20:22:17.645353 ignition[775]: INFO : files: op(c): op(d): [started] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata-sshkeys@.service.d/20-clct-provider-override.conf" Oct 2 20:22:17.645353 ignition[775]: INFO : files: op(c): op(d): [finished] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata-sshkeys@.service.d/20-clct-provider-override.conf" Oct 2 20:22:17.645353 ignition[775]: INFO : files: op(c): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 20:22:17.645353 ignition[775]: INFO : files: op(e): [started] processing unit "coreos-metadata.service" Oct 2 20:22:17.645353 ignition[775]: INFO : files: op(e): op(f): [started] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata.service.d/20-clct-provider-override.conf" Oct 2 20:22:17.645353 ignition[775]: INFO : files: op(e): op(f): [finished] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata.service.d/20-clct-provider-override.conf" Oct 2 20:22:17.645353 ignition[775]: INFO : files: op(e): [finished] processing unit "coreos-metadata.service" Oct 2 20:22:17.645353 ignition[775]: INFO : files: op(10): [started] processing unit "prepare-cni-plugins.service" Oct 2 20:22:17.645353 ignition[775]: INFO : files: op(10): op(11): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:22:17.645353 ignition[775]: INFO : files: op(10): op(11): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:22:17.645353 ignition[775]: INFO : files: op(10): [finished] processing unit "prepare-cni-plugins.service" Oct 2 20:22:17.645353 ignition[775]: INFO : files: op(12): [started] processing unit "prepare-critools.service" Oct 2 20:22:17.645353 ignition[775]: INFO : files: op(12): op(13): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:22:17.645353 ignition[775]: INFO : files: op(12): op(13): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:22:17.645353 ignition[775]: INFO : files: op(12): [finished] processing unit "prepare-critools.service" Oct 2 20:22:17.645353 ignition[775]: INFO : files: op(14): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 20:22:17.701227 kernel: kauditd_printk_skb: 27 callbacks suppressed Oct 2 20:22:17.701276 kernel: audit: type=1130 audit(1696278137.671:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.701474 ignition[775]: INFO : files: op(14): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 20:22:17.701474 ignition[775]: INFO : files: op(15): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:22:17.701474 ignition[775]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:22:17.701474 ignition[775]: INFO : files: op(16): [started] setting preset to enabled for "prepare-critools.service" Oct 2 20:22:17.701474 ignition[775]: INFO : files: op(16): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 20:22:17.701474 ignition[775]: INFO : files: createResultFile: createFiles: op(17): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:22:17.701474 ignition[775]: INFO : files: createResultFile: createFiles: op(17): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:22:17.701474 ignition[775]: INFO : files: files passed Oct 2 20:22:17.701474 ignition[775]: INFO : Ignition finished successfully Oct 2 20:22:17.730998 kernel: audit: type=1130 audit(1696278137.705:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.731018 kernel: audit: type=1131 audit(1696278137.705:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.731030 kernel: audit: type=1130 audit(1696278137.721:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.667649 systemd[1]: Finished ignition-files.service. Oct 2 20:22:17.676625 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 20:22:17.732402 initrd-setup-root-after-ignition[800]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 20:22:17.689987 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 20:22:17.691776 systemd[1]: Starting ignition-quench.service... Oct 2 20:22:17.701942 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 20:22:17.702124 systemd[1]: Finished ignition-quench.service. Oct 2 20:22:17.720144 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 20:22:17.722199 systemd[1]: Reached target ignition-complete.target. Oct 2 20:22:17.728970 systemd[1]: Starting initrd-parse-etc.service... Oct 2 20:22:17.754677 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 20:22:17.754889 systemd[1]: Finished initrd-parse-etc.service. Oct 2 20:22:17.763866 kernel: audit: type=1130 audit(1696278137.756:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.763887 kernel: audit: type=1131 audit(1696278137.756:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.756901 systemd[1]: Reached target initrd-fs.target. Oct 2 20:22:17.764961 systemd[1]: Reached target initrd.target. Oct 2 20:22:17.766556 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 20:22:17.768152 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 20:22:17.783117 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 20:22:17.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.785904 systemd[1]: Starting initrd-cleanup.service... Oct 2 20:22:17.790256 kernel: audit: type=1130 audit(1696278137.783:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.799912 systemd[1]: Stopped target nss-lookup.target. Oct 2 20:22:17.800947 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 20:22:17.802000 systemd[1]: Stopped target timers.target. Oct 2 20:22:17.802977 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 20:22:17.803641 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 20:22:17.804000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.804977 systemd[1]: Stopped target initrd.target. Oct 2 20:22:17.813451 kernel: audit: type=1131 audit(1696278137.804:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.813221 systemd[1]: Stopped target basic.target. Oct 2 20:22:17.814677 systemd[1]: Stopped target ignition-complete.target. Oct 2 20:22:17.816195 systemd[1]: Stopped target ignition-diskful.target. Oct 2 20:22:17.817850 systemd[1]: Stopped target initrd-root-device.target. Oct 2 20:22:17.819458 systemd[1]: Stopped target remote-fs.target. Oct 2 20:22:17.820971 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 20:22:17.822547 systemd[1]: Stopped target sysinit.target. Oct 2 20:22:17.824057 systemd[1]: Stopped target local-fs.target. Oct 2 20:22:17.825586 systemd[1]: Stopped target local-fs-pre.target. Oct 2 20:22:17.827072 systemd[1]: Stopped target swap.target. Oct 2 20:22:17.828528 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 20:22:17.833687 kernel: audit: type=1131 audit(1696278137.829:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.828812 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 20:22:17.830215 systemd[1]: Stopped target cryptsetup.target. Oct 2 20:22:17.840587 kernel: audit: type=1131 audit(1696278137.836:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.836000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.834825 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 20:22:17.835080 systemd[1]: Stopped dracut-initqueue.service. Oct 2 20:22:17.836659 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 20:22:17.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.836938 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 20:22:17.845000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.843787 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 20:22:17.843892 systemd[1]: Stopped ignition-files.service. Oct 2 20:22:17.846623 systemd[1]: Stopping ignition-mount.service... Oct 2 20:22:17.852832 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 20:22:17.854000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.853067 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 20:22:17.855464 systemd[1]: Stopping sysroot-boot.service... Oct 2 20:22:17.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.863000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.868039 ignition[813]: INFO : Ignition 2.14.0 Oct 2 20:22:17.868039 ignition[813]: INFO : Stage: umount Oct 2 20:22:17.868039 ignition[813]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:22:17.868039 ignition[813]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Oct 2 20:22:17.868039 ignition[813]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Oct 2 20:22:17.868039 ignition[813]: INFO : umount: umount passed Oct 2 20:22:17.868039 ignition[813]: INFO : Ignition finished successfully Oct 2 20:22:17.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.859818 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 20:22:17.875000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.859971 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 20:22:17.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.860557 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 20:22:17.860662 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 20:22:17.878000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.863681 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 20:22:17.863768 systemd[1]: Finished initrd-cleanup.service. Oct 2 20:22:17.871677 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 20:22:17.871822 systemd[1]: Stopped ignition-mount.service. Oct 2 20:22:17.872845 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 20:22:17.872943 systemd[1]: Stopped ignition-disks.service. Oct 2 20:22:17.874630 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 20:22:17.874710 systemd[1]: Stopped ignition-kargs.service. Oct 2 20:22:17.875540 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 20:22:17.875577 systemd[1]: Stopped ignition-fetch.service. Oct 2 20:22:17.876578 systemd[1]: Stopped target network.target. Oct 2 20:22:17.877475 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 20:22:17.877516 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 20:22:17.878521 systemd[1]: Stopped target paths.target. Oct 2 20:22:17.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.879381 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 20:22:17.883412 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 20:22:17.884112 systemd[1]: Stopped target slices.target. Oct 2 20:22:17.885000 systemd[1]: Stopped target sockets.target. Oct 2 20:22:17.885866 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 20:22:17.885890 systemd[1]: Closed iscsid.socket. Oct 2 20:22:17.886694 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 20:22:17.886718 systemd[1]: Closed iscsiuio.socket. Oct 2 20:22:17.887707 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 20:22:17.887746 systemd[1]: Stopped ignition-setup.service. Oct 2 20:22:17.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.888744 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:22:17.889752 systemd[1]: Stopping systemd-resolved.service... Oct 2 20:22:17.892528 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 20:22:17.893343 systemd-networkd[631]: eth0: DHCPv6 lease lost Oct 2 20:22:17.894184 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:22:17.894270 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:22:17.902000 audit: BPF prog-id=9 op=UNLOAD Oct 2 20:22:17.895678 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 20:22:17.895707 systemd[1]: Closed systemd-networkd.socket. Oct 2 20:22:17.903000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.898357 systemd[1]: Stopping network-cleanup.service... Oct 2 20:22:17.904000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.903272 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 20:22:17.905000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.903365 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 20:22:17.904278 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 20:22:17.904378 systemd[1]: Stopped systemd-sysctl.service. Oct 2 20:22:17.905371 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 20:22:17.905415 systemd[1]: Stopped systemd-modules-load.service. Oct 2 20:22:17.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.906358 systemd[1]: Stopping systemd-udevd.service... Oct 2 20:22:17.908373 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 20:22:17.909004 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 20:22:17.912000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.909116 systemd[1]: Stopped systemd-resolved.service. Oct 2 20:22:17.913000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.911091 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 20:22:17.911190 systemd[1]: Stopped sysroot-boot.service. Oct 2 20:22:17.912950 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 20:22:17.915000 audit: BPF prog-id=6 op=UNLOAD Oct 2 20:22:17.913073 systemd[1]: Stopped systemd-udevd.service. Oct 2 20:22:17.915068 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 20:22:17.918000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.915100 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 20:22:17.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.915891 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 20:22:17.920000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.915923 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 20:22:17.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.917987 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 20:22:17.918036 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 20:22:17.918992 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 20:22:17.929000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.919031 systemd[1]: Stopped dracut-cmdline.service. Oct 2 20:22:17.929000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.920022 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 20:22:17.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.930000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:17.920057 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 20:22:17.920898 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 20:22:17.920934 systemd[1]: Stopped initrd-setup-root.service. Oct 2 20:22:17.922533 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 20:22:17.923271 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 20:22:17.923356 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 20:22:17.929745 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 20:22:17.929837 systemd[1]: Stopped network-cleanup.service. Oct 2 20:22:17.930459 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 20:22:17.930531 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 20:22:17.931265 systemd[1]: Reached target initrd-switch-root.target. Oct 2 20:22:17.932678 systemd[1]: Starting initrd-switch-root.service... Oct 2 20:22:17.951435 systemd[1]: Switching root. Oct 2 20:22:17.979134 iscsid[636]: iscsid shutting down. Oct 2 20:22:17.980065 systemd-journald[184]: Received SIGTERM from PID 1 (n/a). Oct 2 20:22:17.980148 systemd-journald[184]: Journal stopped Oct 2 20:22:22.154580 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 20:22:22.154633 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 20:22:22.154647 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 20:22:22.154659 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 20:22:22.154670 kernel: SELinux: policy capability open_perms=1 Oct 2 20:22:22.154681 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 20:22:22.154692 kernel: SELinux: policy capability always_check_network=0 Oct 2 20:22:22.154703 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 20:22:22.154715 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 20:22:22.154726 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 20:22:22.154737 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 20:22:22.154755 systemd[1]: Successfully loaded SELinux policy in 93.843ms. Oct 2 20:22:22.154776 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 21.713ms. Oct 2 20:22:22.154789 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:22:22.154802 systemd[1]: Detected virtualization kvm. Oct 2 20:22:22.154814 systemd[1]: Detected architecture x86-64. Oct 2 20:22:22.154825 systemd[1]: Detected first boot. Oct 2 20:22:22.154839 systemd[1]: Hostname set to . Oct 2 20:22:22.154851 systemd[1]: Initializing machine ID from VM UUID. Oct 2 20:22:22.154871 systemd[1]: Populated /etc with preset unit settings. Oct 2 20:22:22.154884 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:22:22.154901 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:22:22.154914 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:22:22.154928 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 20:22:22.154941 systemd[1]: Stopped iscsiuio.service. Oct 2 20:22:22.154952 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 20:22:22.154964 systemd[1]: Stopped iscsid.service. Oct 2 20:22:22.154976 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 20:22:22.154987 systemd[1]: Stopped initrd-switch-root.service. Oct 2 20:22:22.154999 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 20:22:22.155011 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 20:22:22.155025 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 20:22:22.155037 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 20:22:22.155049 systemd[1]: Created slice system-getty.slice. Oct 2 20:22:22.155064 systemd[1]: Created slice system-modprobe.slice. Oct 2 20:22:22.155076 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 20:22:22.155088 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 20:22:22.155100 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 20:22:22.155112 systemd[1]: Created slice user.slice. Oct 2 20:22:22.155124 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:22:22.155148 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 20:22:22.155161 systemd[1]: Set up automount boot.automount. Oct 2 20:22:22.155172 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 20:22:22.155184 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 20:22:22.155195 systemd[1]: Stopped target initrd-fs.target. Oct 2 20:22:22.155207 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 20:22:22.155221 systemd[1]: Reached target integritysetup.target. Oct 2 20:22:22.155233 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:22:22.155244 systemd[1]: Reached target remote-fs.target. Oct 2 20:22:22.155256 systemd[1]: Reached target slices.target. Oct 2 20:22:22.155267 systemd[1]: Reached target swap.target. Oct 2 20:22:22.155279 systemd[1]: Reached target torcx.target. Oct 2 20:22:22.155291 systemd[1]: Reached target veritysetup.target. Oct 2 20:22:22.155369 systemd[1]: Listening on systemd-coredump.socket. Oct 2 20:22:22.155382 systemd[1]: Listening on systemd-initctl.socket. Oct 2 20:22:22.155396 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:22:22.155407 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:22:22.155419 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:22:22.155431 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 20:22:22.155442 systemd[1]: Mounting dev-hugepages.mount... Oct 2 20:22:22.155454 systemd[1]: Mounting dev-mqueue.mount... Oct 2 20:22:22.155474 systemd[1]: Mounting media.mount... Oct 2 20:22:22.155486 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:22:22.155499 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 20:22:22.155510 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 20:22:22.155525 systemd[1]: Mounting tmp.mount... Oct 2 20:22:22.155537 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 20:22:22.155548 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 20:22:22.155560 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:22:22.155572 systemd[1]: Starting modprobe@configfs.service... Oct 2 20:22:22.155583 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 20:22:22.155595 systemd[1]: Starting modprobe@drm.service... Oct 2 20:22:22.155608 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 20:22:22.155620 systemd[1]: Starting modprobe@fuse.service... Oct 2 20:22:22.155633 systemd[1]: Starting modprobe@loop.service... Oct 2 20:22:22.155645 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 20:22:22.155659 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 20:22:22.155671 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 20:22:22.155682 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 20:22:22.155695 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 20:22:22.155707 systemd[1]: Stopped systemd-journald.service. Oct 2 20:22:22.155719 systemd[1]: Starting systemd-journald.service... Oct 2 20:22:22.155737 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:22:22.155751 systemd[1]: Starting systemd-network-generator.service... Oct 2 20:22:22.155764 systemd[1]: Starting systemd-remount-fs.service... Oct 2 20:22:22.155775 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:22:22.155787 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 20:22:22.155799 systemd[1]: Stopped verity-setup.service. Oct 2 20:22:22.155811 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:22:22.155823 systemd[1]: Mounted dev-hugepages.mount. Oct 2 20:22:22.155835 systemd[1]: Mounted dev-mqueue.mount. Oct 2 20:22:22.155847 systemd[1]: Mounted media.mount. Oct 2 20:22:22.155860 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 20:22:22.155872 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 20:22:22.155884 systemd[1]: Mounted tmp.mount. Oct 2 20:22:22.155896 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:22:22.155908 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 20:22:22.155922 systemd[1]: Finished modprobe@configfs.service. Oct 2 20:22:22.155934 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 20:22:22.155946 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 20:22:22.155958 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 20:22:22.155970 systemd[1]: Finished modprobe@drm.service. Oct 2 20:22:22.155983 systemd-journald[915]: Journal started Oct 2 20:22:22.156030 systemd-journald[915]: Runtime Journal (/run/log/journal/f9a058df4ac54a36808123952d5e144c) is 4.9M, max 39.5M, 34.5M free. Oct 2 20:22:18.345000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 20:22:18.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:22:18.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:22:18.484000 audit: BPF prog-id=10 op=LOAD Oct 2 20:22:18.484000 audit: BPF prog-id=10 op=UNLOAD Oct 2 20:22:18.485000 audit: BPF prog-id=11 op=LOAD Oct 2 20:22:18.485000 audit: BPF prog-id=11 op=UNLOAD Oct 2 20:22:21.931000 audit: BPF prog-id=12 op=LOAD Oct 2 20:22:21.931000 audit: BPF prog-id=3 op=UNLOAD Oct 2 20:22:21.931000 audit: BPF prog-id=13 op=LOAD Oct 2 20:22:21.932000 audit: BPF prog-id=14 op=LOAD Oct 2 20:22:21.932000 audit: BPF prog-id=4 op=UNLOAD Oct 2 20:22:21.932000 audit: BPF prog-id=5 op=UNLOAD Oct 2 20:22:21.933000 audit: BPF prog-id=15 op=LOAD Oct 2 20:22:21.933000 audit: BPF prog-id=12 op=UNLOAD Oct 2 20:22:21.933000 audit: BPF prog-id=16 op=LOAD Oct 2 20:22:21.933000 audit: BPF prog-id=17 op=LOAD Oct 2 20:22:21.933000 audit: BPF prog-id=13 op=UNLOAD Oct 2 20:22:21.933000 audit: BPF prog-id=14 op=UNLOAD Oct 2 20:22:21.934000 audit: BPF prog-id=18 op=LOAD Oct 2 20:22:21.934000 audit: BPF prog-id=15 op=UNLOAD Oct 2 20:22:21.934000 audit: BPF prog-id=19 op=LOAD Oct 2 20:22:21.934000 audit: BPF prog-id=20 op=LOAD Oct 2 20:22:21.934000 audit: BPF prog-id=16 op=UNLOAD Oct 2 20:22:21.934000 audit: BPF prog-id=17 op=UNLOAD Oct 2 20:22:21.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:21.939000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:21.942000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:21.944000 audit: BPF prog-id=18 op=UNLOAD Oct 2 20:22:21.946000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:21.946000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.085000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.164180 kernel: fuse: init (API version 7.34) Oct 2 20:22:22.164205 systemd[1]: Started systemd-journald.service. Oct 2 20:22:22.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.089000 audit: BPF prog-id=21 op=LOAD Oct 2 20:22:22.089000 audit: BPF prog-id=22 op=LOAD Oct 2 20:22:22.090000 audit: BPF prog-id=23 op=LOAD Oct 2 20:22:22.090000 audit: BPF prog-id=19 op=UNLOAD Oct 2 20:22:22.090000 audit: BPF prog-id=20 op=UNLOAD Oct 2 20:22:22.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.150000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.152000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 20:22:22.152000 audit[915]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffc01b0d350 a2=4000 a3=7ffc01b0d3ec items=0 ppid=1 pid=915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:22.152000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 20:22:22.153000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.153000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.158000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:18.704957 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:18Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:22:21.929934 systemd[1]: Queued start job for default target multi-user.target. Oct 2 20:22:18.706337 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:18Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:22:21.929946 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 20:22:18.706408 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:18Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:22:21.936065 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 20:22:18.706487 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:18Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 20:22:22.160446 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 20:22:18.706509 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:18Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 20:22:22.160610 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 20:22:18.706565 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:18Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 20:22:22.161258 systemd[1]: Finished systemd-network-generator.service. Oct 2 20:22:18.706592 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:18Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 20:22:22.161921 systemd[1]: Finished systemd-remount-fs.service. Oct 2 20:22:18.706970 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:18Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 20:22:22.162678 systemd[1]: Reached target network-pre.target. Oct 2 20:22:18.707041 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:18Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:22:22.165932 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 20:22:18.707068 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:18Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:22:22.168999 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 20:22:18.708635 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:18Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 20:22:18.708732 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:18Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 20:22:18.708771 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:18Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 20:22:18.708802 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:18Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 20:22:18.708838 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:18Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 20:22:18.708867 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:18Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 20:22:21.550770 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:21Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:22:21.551055 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:21Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:22:21.551173 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:21Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:22:21.551406 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:21Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:22:21.551465 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:21Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 20:22:21.551533 /usr/lib/systemd/system-generators/torcx-generator[845]: time="2023-10-02T20:22:21Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 20:22:22.172619 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 20:22:22.178392 systemd[1]: Starting systemd-journal-flush.service... Oct 2 20:22:22.178930 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 20:22:22.190337 kernel: loop: module loaded Oct 2 20:22:22.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.190540 systemd-journald[915]: Time spent on flushing to /var/log/journal/f9a058df4ac54a36808123952d5e144c is 33.441ms for 1098 entries. Oct 2 20:22:22.190540 systemd-journald[915]: System Journal (/var/log/journal/f9a058df4ac54a36808123952d5e144c) is 8.0M, max 584.8M, 576.8M free. Oct 2 20:22:22.321987 systemd-journald[915]: Received client request to flush runtime journal. Oct 2 20:22:22.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.180049 systemd[1]: Starting systemd-random-seed.service... Oct 2 20:22:22.184724 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 20:22:22.184943 systemd[1]: Finished modprobe@fuse.service. Oct 2 20:22:22.186586 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 20:22:22.186737 systemd[1]: Finished modprobe@loop.service. Oct 2 20:22:22.187431 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:22:22.188033 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 20:22:22.333252 udevadm[955]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 20:22:22.189881 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 20:22:22.192731 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 20:22:22.194233 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:22:22.197116 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 20:22:22.215873 systemd[1]: Finished systemd-random-seed.service. Oct 2 20:22:22.216502 systemd[1]: Reached target first-boot-complete.target. Oct 2 20:22:22.223584 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:22:22.253660 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 20:22:22.255369 systemd[1]: Starting systemd-sysusers.service... Oct 2 20:22:22.263217 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:22:22.264745 systemd[1]: Starting systemd-udev-settle.service... Oct 2 20:22:22.323561 systemd[1]: Finished systemd-journal-flush.service. Oct 2 20:22:22.367000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:22.366273 systemd[1]: Finished systemd-sysusers.service. Oct 2 20:22:23.923017 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 20:22:23.935973 kernel: kauditd_printk_skb: 97 callbacks suppressed Oct 2 20:22:23.936107 kernel: audit: type=1130 audit(1696278143.923:143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:23.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:23.926000 audit: BPF prog-id=24 op=LOAD Oct 2 20:22:23.937088 systemd[1]: Starting systemd-udevd.service... Oct 2 20:22:23.935000 audit: BPF prog-id=25 op=LOAD Oct 2 20:22:23.942968 kernel: audit: type=1334 audit(1696278143.926:144): prog-id=24 op=LOAD Oct 2 20:22:23.943054 kernel: audit: type=1334 audit(1696278143.935:145): prog-id=25 op=LOAD Oct 2 20:22:23.943109 kernel: audit: type=1334 audit(1696278143.935:146): prog-id=7 op=UNLOAD Oct 2 20:22:23.943161 kernel: audit: type=1334 audit(1696278143.935:147): prog-id=8 op=UNLOAD Oct 2 20:22:23.935000 audit: BPF prog-id=7 op=UNLOAD Oct 2 20:22:23.935000 audit: BPF prog-id=8 op=UNLOAD Oct 2 20:22:23.985453 systemd-udevd[956]: Using default interface naming scheme 'v252'. Oct 2 20:22:24.048918 systemd[1]: Started systemd-udevd.service. Oct 2 20:22:24.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:24.059349 kernel: audit: type=1130 audit(1696278144.049:148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:24.066948 systemd[1]: Starting systemd-networkd.service... Oct 2 20:22:24.063000 audit: BPF prog-id=26 op=LOAD Oct 2 20:22:24.071201 kernel: audit: type=1334 audit(1696278144.063:149): prog-id=26 op=LOAD Oct 2 20:22:24.086563 systemd[1]: Starting systemd-userdbd.service... Oct 2 20:22:24.084000 audit: BPF prog-id=27 op=LOAD Oct 2 20:22:24.084000 audit: BPF prog-id=28 op=LOAD Oct 2 20:22:24.084000 audit: BPF prog-id=29 op=LOAD Oct 2 20:22:24.090397 kernel: audit: type=1334 audit(1696278144.084:150): prog-id=27 op=LOAD Oct 2 20:22:24.090475 kernel: audit: type=1334 audit(1696278144.084:151): prog-id=28 op=LOAD Oct 2 20:22:24.090515 kernel: audit: type=1334 audit(1696278144.084:152): prog-id=29 op=LOAD Oct 2 20:22:24.142013 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 20:22:24.152661 systemd[1]: Started systemd-userdbd.service. Oct 2 20:22:24.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:24.177474 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:22:24.212637 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 Oct 2 20:22:24.231000 audit[959]: AVC avc: denied { confidentiality } for pid=959 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 20:22:24.231000 audit[959]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=5602958748b0 a1=32194 a2=7f60aac67bc5 a3=5 items=106 ppid=956 pid=959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:24.231000 audit: CWD cwd="/" Oct 2 20:22:24.231000 audit: PATH item=0 name=(null) inode=13775 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=1 name=(null) inode=13776 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=2 name=(null) inode=13775 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=3 name=(null) inode=13777 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=4 name=(null) inode=13775 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=5 name=(null) inode=13778 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=6 name=(null) inode=13778 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=7 name=(null) inode=13779 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=8 name=(null) inode=13778 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=9 name=(null) inode=13780 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=10 name=(null) inode=13778 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=11 name=(null) inode=13781 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=12 name=(null) inode=13778 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=13 name=(null) inode=13782 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=14 name=(null) inode=13778 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=15 name=(null) inode=13783 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=16 name=(null) inode=13775 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=17 name=(null) inode=13784 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=18 name=(null) inode=13784 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=19 name=(null) inode=13785 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=20 name=(null) inode=13784 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=21 name=(null) inode=13786 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=22 name=(null) inode=13784 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=23 name=(null) inode=13787 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=24 name=(null) inode=13784 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=25 name=(null) inode=13788 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=26 name=(null) inode=13784 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=27 name=(null) inode=13789 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=28 name=(null) inode=13775 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=29 name=(null) inode=13790 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=30 name=(null) inode=13790 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=31 name=(null) inode=13791 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=32 name=(null) inode=13790 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=33 name=(null) inode=13792 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=34 name=(null) inode=13790 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=35 name=(null) inode=13793 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=36 name=(null) inode=13790 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=37 name=(null) inode=13794 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=38 name=(null) inode=13790 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=39 name=(null) inode=13795 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=40 name=(null) inode=13775 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=41 name=(null) inode=13796 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=42 name=(null) inode=13796 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=43 name=(null) inode=13797 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=44 name=(null) inode=13796 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=45 name=(null) inode=13798 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=46 name=(null) inode=13796 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=47 name=(null) inode=13799 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=48 name=(null) inode=13796 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=49 name=(null) inode=13800 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=50 name=(null) inode=13796 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=51 name=(null) inode=13801 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=52 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=53 name=(null) inode=13802 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=54 name=(null) inode=13802 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=55 name=(null) inode=13803 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=56 name=(null) inode=13802 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=57 name=(null) inode=13804 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=58 name=(null) inode=13802 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=59 name=(null) inode=13805 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=60 name=(null) inode=13805 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=61 name=(null) inode=13806 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=62 name=(null) inode=13805 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=63 name=(null) inode=13807 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=64 name=(null) inode=13805 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=65 name=(null) inode=13808 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=66 name=(null) inode=13805 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=67 name=(null) inode=13809 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=68 name=(null) inode=13805 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=69 name=(null) inode=13810 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=70 name=(null) inode=13802 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=71 name=(null) inode=13811 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=72 name=(null) inode=13811 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=73 name=(null) inode=13812 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=74 name=(null) inode=13811 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=75 name=(null) inode=13813 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=76 name=(null) inode=13811 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=77 name=(null) inode=13814 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=78 name=(null) inode=13811 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=79 name=(null) inode=13815 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=80 name=(null) inode=13811 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=81 name=(null) inode=13816 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=82 name=(null) inode=13802 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=83 name=(null) inode=13817 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=84 name=(null) inode=13817 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=85 name=(null) inode=13818 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=86 name=(null) inode=13817 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=87 name=(null) inode=13819 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=88 name=(null) inode=13817 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=89 name=(null) inode=13820 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=90 name=(null) inode=13817 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=91 name=(null) inode=13821 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=92 name=(null) inode=13817 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=93 name=(null) inode=13822 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=94 name=(null) inode=13802 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=95 name=(null) inode=13823 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=96 name=(null) inode=13823 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=97 name=(null) inode=13824 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=98 name=(null) inode=13823 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=99 name=(null) inode=13825 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=100 name=(null) inode=13823 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=101 name=(null) inode=13826 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=102 name=(null) inode=13823 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=103 name=(null) inode=13827 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=104 name=(null) inode=13823 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PATH item=105 name=(null) inode=13828 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:22:24.231000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 20:22:24.242903 systemd-networkd[972]: lo: Link UP Oct 2 20:22:24.242911 systemd-networkd[972]: lo: Gained carrier Oct 2 20:22:24.243350 systemd-networkd[972]: Enumeration completed Oct 2 20:22:24.243442 systemd[1]: Started systemd-networkd.service. Oct 2 20:22:24.243552 systemd-networkd[972]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:22:24.244347 kernel: ACPI: button: Power Button [PWRF] Oct 2 20:22:24.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:24.246799 systemd-networkd[972]: eth0: Link UP Oct 2 20:22:24.246808 systemd-networkd[972]: eth0: Gained carrier Oct 2 20:22:24.258348 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input4 Oct 2 20:22:24.260453 systemd-networkd[972]: eth0: DHCPv4 address 172.24.4.85/24, gateway 172.24.4.1 acquired from 172.24.4.1 Oct 2 20:22:24.272365 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Oct 2 20:22:24.283323 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 20:22:24.327698 systemd[1]: Finished systemd-udev-settle.service. Oct 2 20:22:24.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:24.329353 systemd[1]: Starting lvm2-activation-early.service... Oct 2 20:22:24.380129 lvm[985]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:22:24.419978 systemd[1]: Finished lvm2-activation-early.service. Oct 2 20:22:24.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:24.421442 systemd[1]: Reached target cryptsetup.target. Oct 2 20:22:24.424743 systemd[1]: Starting lvm2-activation.service... Oct 2 20:22:24.434054 lvm[986]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:22:24.477141 systemd[1]: Finished lvm2-activation.service. Oct 2 20:22:24.477000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:24.478492 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:22:24.479610 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 20:22:24.479668 systemd[1]: Reached target local-fs.target. Oct 2 20:22:24.480768 systemd[1]: Reached target machines.target. Oct 2 20:22:24.484252 systemd[1]: Starting ldconfig.service... Oct 2 20:22:24.492236 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 20:22:24.492367 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:22:24.494577 systemd[1]: Starting systemd-boot-update.service... Oct 2 20:22:24.498055 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 20:22:24.502755 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 20:22:24.504166 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:22:24.504260 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:22:24.506505 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 20:22:24.544255 systemd[1]: boot.automount: Got automount request for /boot, triggered by 988 (bootctl) Oct 2 20:22:24.546830 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 20:22:24.738083 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 20:22:24.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:25.147410 systemd-tmpfiles[991]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 20:22:25.254883 systemd-tmpfiles[991]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 20:22:25.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:25.301850 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 20:22:25.303143 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 20:22:25.310799 systemd-tmpfiles[991]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 20:22:25.455840 systemd-fsck[996]: fsck.fat 4.2 (2021-01-31) Oct 2 20:22:25.455840 systemd-fsck[996]: /dev/vda1: 789 files, 115069/258078 clusters Oct 2 20:22:25.460468 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 20:22:25.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:25.464868 systemd[1]: Mounting boot.mount... Oct 2 20:22:25.491241 systemd[1]: Mounted boot.mount. Oct 2 20:22:25.532798 systemd[1]: Finished systemd-boot-update.service. Oct 2 20:22:25.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:25.631722 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 20:22:25.631000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:25.633472 systemd[1]: Starting audit-rules.service... Oct 2 20:22:25.634881 systemd[1]: Starting clean-ca-certificates.service... Oct 2 20:22:25.639000 audit: BPF prog-id=30 op=LOAD Oct 2 20:22:25.637881 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 20:22:25.642437 systemd[1]: Starting systemd-resolved.service... Oct 2 20:22:25.643000 audit: BPF prog-id=31 op=LOAD Oct 2 20:22:25.644530 systemd[1]: Starting systemd-timesyncd.service... Oct 2 20:22:25.645986 systemd[1]: Starting systemd-update-utmp.service... Oct 2 20:22:25.646857 systemd-networkd[972]: eth0: Gained IPv6LL Oct 2 20:22:25.660000 audit[1004]: SYSTEM_BOOT pid=1004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:22:25.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:25.663654 systemd[1]: Finished systemd-update-utmp.service. Oct 2 20:22:25.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:25.680270 systemd[1]: Finished clean-ca-certificates.service. Oct 2 20:22:25.680891 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 20:22:25.725445 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 20:22:25.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:25.726000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 20:22:25.726000 audit[1019]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffeff254b60 a2=420 a3=0 items=0 ppid=999 pid=1019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:25.726000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 20:22:25.728137 augenrules[1019]: No rules Oct 2 20:22:25.729063 systemd[1]: Finished audit-rules.service. Oct 2 20:22:25.738323 systemd[1]: Started systemd-timesyncd.service. Oct 2 20:22:25.738877 systemd[1]: Reached target time-set.target. Oct 2 20:22:25.777731 systemd-timesyncd[1003]: Contacted time server 162.159.200.123:123 (0.flatcar.pool.ntp.org). Oct 2 20:22:25.778150 systemd-timesyncd[1003]: Initial clock synchronization to Mon 2023-10-02 20:22:25.974196 UTC. Oct 2 20:22:25.778674 systemd-resolved[1002]: Positive Trust Anchors: Oct 2 20:22:25.778689 systemd-resolved[1002]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:22:25.778726 systemd-resolved[1002]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:22:25.803536 systemd-resolved[1002]: Using system hostname 'ci-3510-3-0-7-ba0a608fa7.novalocal'. Oct 2 20:22:25.805162 systemd[1]: Started systemd-resolved.service. Oct 2 20:22:25.806491 systemd[1]: Reached target network.target. Oct 2 20:22:25.807566 systemd[1]: Reached target nss-lookup.target. Oct 2 20:22:26.294558 ldconfig[987]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 20:22:26.309456 systemd[1]: Finished ldconfig.service. Oct 2 20:22:26.314409 systemd[1]: Starting systemd-update-done.service... Oct 2 20:22:26.327570 systemd[1]: Finished systemd-update-done.service. Oct 2 20:22:26.328924 systemd[1]: Reached target sysinit.target. Oct 2 20:22:26.330204 systemd[1]: Started motdgen.path. Oct 2 20:22:26.331315 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 20:22:26.333137 systemd[1]: Started logrotate.timer. Oct 2 20:22:26.334492 systemd[1]: Started mdadm.timer. Oct 2 20:22:26.335534 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 20:22:26.336733 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 20:22:26.336802 systemd[1]: Reached target paths.target. Oct 2 20:22:26.337905 systemd[1]: Reached target timers.target. Oct 2 20:22:26.340377 systemd[1]: Listening on dbus.socket. Oct 2 20:22:26.343744 systemd[1]: Starting docker.socket... Oct 2 20:22:26.354049 systemd[1]: Listening on sshd.socket. Oct 2 20:22:26.355373 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:22:26.356268 systemd[1]: Listening on docker.socket. Oct 2 20:22:26.357578 systemd[1]: Reached target sockets.target. Oct 2 20:22:26.358675 systemd[1]: Reached target basic.target. Oct 2 20:22:26.359851 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:22:26.359929 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:22:26.362196 systemd[1]: Starting containerd.service... Oct 2 20:22:26.365474 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 20:22:26.368925 systemd[1]: Starting dbus.service... Oct 2 20:22:26.374106 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 20:22:26.384620 systemd[1]: Starting extend-filesystems.service... Oct 2 20:22:26.386029 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 20:22:26.389020 systemd[1]: Starting motdgen.service... Oct 2 20:22:26.393032 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 20:22:26.400831 systemd[1]: Starting prepare-critools.service... Oct 2 20:22:26.406527 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 20:22:26.408345 systemd[1]: Starting sshd-keygen.service... Oct 2 20:22:26.415817 systemd[1]: Starting systemd-logind.service... Oct 2 20:22:26.416444 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:22:26.416517 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 20:22:26.417049 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 20:22:26.418075 systemd[1]: Starting update-engine.service... Oct 2 20:22:26.420448 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 20:22:26.435870 jq[1042]: true Oct 2 20:22:26.442735 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 20:22:26.442889 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 20:22:26.448655 tar[1046]: ./ Oct 2 20:22:26.448655 tar[1046]: ./macvlan Oct 2 20:22:26.450802 tar[1044]: crictl Oct 2 20:22:26.454993 jq[1033]: false Oct 2 20:22:26.455428 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 20:22:26.455595 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 20:22:26.468004 jq[1047]: true Oct 2 20:22:26.488931 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 20:22:26.494887 systemd[1]: Finished motdgen.service. Oct 2 20:22:26.501984 extend-filesystems[1034]: Found vda Oct 2 20:22:26.510443 extend-filesystems[1034]: Found vda1 Oct 2 20:22:26.511019 extend-filesystems[1034]: Found vda2 Oct 2 20:22:26.513184 extend-filesystems[1034]: Found vda3 Oct 2 20:22:26.514401 extend-filesystems[1034]: Found usr Oct 2 20:22:26.515059 extend-filesystems[1034]: Found vda4 Oct 2 20:22:26.515812 extend-filesystems[1034]: Found vda6 Oct 2 20:22:26.517998 extend-filesystems[1034]: Found vda7 Oct 2 20:22:26.518571 extend-filesystems[1034]: Found vda9 Oct 2 20:22:26.520144 extend-filesystems[1034]: Checking size of /dev/vda9 Oct 2 20:22:26.546953 dbus-daemon[1030]: [system] SELinux support is enabled Oct 2 20:22:26.547141 systemd[1]: Started dbus.service. Oct 2 20:22:26.549743 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 20:22:26.549772 systemd[1]: Reached target system-config.target. Oct 2 20:22:26.550292 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 20:22:26.550652 systemd[1]: Reached target user-config.target. Oct 2 20:22:26.559662 extend-filesystems[1034]: Resized partition /dev/vda9 Oct 2 20:22:26.578914 extend-filesystems[1086]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 20:22:26.596798 env[1045]: time="2023-10-02T20:22:26.596731975Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 20:22:26.623666 kernel: EXT4-fs (vda9): resizing filesystem from 1617920 to 4635643 blocks Oct 2 20:22:26.637084 bash[1080]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:22:26.637854 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 20:22:26.644615 coreos-metadata[1029]: Oct 02 20:22:26.644 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys: Attempt #1 Oct 2 20:22:26.649065 systemd-logind[1040]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 20:22:26.650176 systemd-logind[1040]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 20:22:26.651413 systemd-logind[1040]: New seat seat0. Oct 2 20:22:26.652739 update_engine[1041]: I1002 20:22:26.651417 1041 main.cc:92] Flatcar Update Engine starting Oct 2 20:22:26.655551 systemd[1]: Started systemd-logind.service. Oct 2 20:22:26.658698 systemd[1]: Started update-engine.service. Oct 2 20:22:26.661161 systemd[1]: Started locksmithd.service. Oct 2 20:22:26.662529 update_engine[1041]: I1002 20:22:26.662497 1041 update_check_scheduler.cc:74] Next update check in 2m43s Oct 2 20:22:26.663363 tar[1046]: ./static Oct 2 20:22:26.697034 tar[1046]: ./vlan Oct 2 20:22:26.726129 env[1045]: time="2023-10-02T20:22:26.726076001Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 20:22:26.730559 env[1045]: time="2023-10-02T20:22:26.730521517Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:22:26.733923 env[1045]: time="2023-10-02T20:22:26.733761390Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:22:26.733923 env[1045]: time="2023-10-02T20:22:26.733797226Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:22:26.734060 env[1045]: time="2023-10-02T20:22:26.734030056Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:22:26.734060 env[1045]: time="2023-10-02T20:22:26.734057146Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 20:22:26.734135 env[1045]: time="2023-10-02T20:22:26.734077644Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 20:22:26.734135 env[1045]: time="2023-10-02T20:22:26.734092098Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 20:22:26.734194 env[1045]: time="2023-10-02T20:22:26.734176825Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:22:26.734508 env[1045]: time="2023-10-02T20:22:26.734484004Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:22:26.734640 env[1045]: time="2023-10-02T20:22:26.734610397Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:22:26.734640 env[1045]: time="2023-10-02T20:22:26.734636542Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 20:22:26.734709 env[1045]: time="2023-10-02T20:22:26.734697321Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 20:22:26.734745 env[1045]: time="2023-10-02T20:22:26.734711856Z" level=info msg="metadata content store policy set" policy=shared Oct 2 20:22:26.764472 tar[1046]: ./portmap Oct 2 20:22:26.778403 env[1045]: time="2023-10-02T20:22:26.778261103Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 20:22:26.778403 env[1045]: time="2023-10-02T20:22:26.778346476Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 20:22:26.778403 env[1045]: time="2023-10-02T20:22:26.778369983Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 20:22:26.778670 env[1045]: time="2023-10-02T20:22:26.778462122Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 20:22:26.778670 env[1045]: time="2023-10-02T20:22:26.778487312Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 20:22:26.778670 env[1045]: time="2023-10-02T20:22:26.778505511Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 20:22:26.778670 env[1045]: time="2023-10-02T20:22:26.778521381Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 20:22:26.778670 env[1045]: time="2023-10-02T20:22:26.778538616Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 20:22:26.778670 env[1045]: time="2023-10-02T20:22:26.778554065Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 20:22:26.778670 env[1045]: time="2023-10-02T20:22:26.778570304Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 20:22:26.778670 env[1045]: time="2023-10-02T20:22:26.778585712Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 20:22:26.778670 env[1045]: time="2023-10-02T20:22:26.778603347Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 20:22:26.778895 env[1045]: time="2023-10-02T20:22:26.778791997Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 20:22:26.778926 env[1045]: time="2023-10-02T20:22:26.778893292Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 20:22:26.779274 env[1045]: time="2023-10-02T20:22:26.779247588Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 20:22:26.779353 env[1045]: time="2023-10-02T20:22:26.779284603Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 20:22:26.779353 env[1045]: time="2023-10-02T20:22:26.779302895Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 20:22:26.779431 env[1045]: time="2023-10-02T20:22:26.779369310Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 20:22:26.779431 env[1045]: time="2023-10-02T20:22:26.779388546Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 20:22:26.779431 env[1045]: time="2023-10-02T20:22:26.779403143Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 20:22:26.779431 env[1045]: time="2023-10-02T20:22:26.779417062Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 20:22:26.779536 env[1045]: time="2023-10-02T20:22:26.779431711Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 20:22:26.779536 env[1045]: time="2023-10-02T20:22:26.779447036Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 20:22:26.779536 env[1045]: time="2023-10-02T20:22:26.779462803Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 20:22:26.779536 env[1045]: time="2023-10-02T20:22:26.779476732Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 20:22:26.779536 env[1045]: time="2023-10-02T20:22:26.779493793Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 20:22:26.779691 env[1045]: time="2023-10-02T20:22:26.779661492Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 20:22:26.779747 env[1045]: time="2023-10-02T20:22:26.779689444Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 20:22:26.779747 env[1045]: time="2023-10-02T20:22:26.779706032Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 20:22:26.779747 env[1045]: time="2023-10-02T20:22:26.779723441Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 20:22:26.779845 env[1045]: time="2023-10-02T20:22:26.779741888Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 20:22:26.779845 env[1045]: time="2023-10-02T20:22:26.779762756Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 20:22:26.779845 env[1045]: time="2023-10-02T20:22:26.779784979Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 20:22:26.779845 env[1045]: time="2023-10-02T20:22:26.779824192Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 20:22:26.780530 env[1045]: time="2023-10-02T20:22:26.780051325Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 20:22:26.780530 env[1045]: time="2023-10-02T20:22:26.780127584Z" level=info msg="Connect containerd service" Oct 2 20:22:26.780530 env[1045]: time="2023-10-02T20:22:26.780160852Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 20:22:26.894894 kernel: EXT4-fs (vda9): resized filesystem to 4635643 Oct 2 20:22:26.895060 coreos-metadata[1029]: Oct 02 20:22:26.876 INFO Fetch successful Oct 2 20:22:26.895060 coreos-metadata[1029]: Oct 02 20:22:26.876 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 20:22:26.895234 env[1045]: time="2023-10-02T20:22:26.783412552Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 20:22:26.895234 env[1045]: time="2023-10-02T20:22:26.783955271Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 20:22:26.895234 env[1045]: time="2023-10-02T20:22:26.784047451Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 20:22:26.895234 env[1045]: time="2023-10-02T20:22:26.784045500Z" level=info msg="Start subscribing containerd event" Oct 2 20:22:26.895234 env[1045]: time="2023-10-02T20:22:26.784172396Z" level=info msg="Start recovering state" Oct 2 20:22:26.895234 env[1045]: time="2023-10-02T20:22:26.784240812Z" level=info msg="Start event monitor" Oct 2 20:22:26.895234 env[1045]: time="2023-10-02T20:22:26.784264094Z" level=info msg="Start snapshots syncer" Oct 2 20:22:26.895234 env[1045]: time="2023-10-02T20:22:26.784275036Z" level=info msg="Start cni network conf syncer for default" Oct 2 20:22:26.895234 env[1045]: time="2023-10-02T20:22:26.784283607Z" level=info msg="Start streaming server" Oct 2 20:22:26.895234 env[1045]: time="2023-10-02T20:22:26.785101233Z" level=info msg="containerd successfully booted in 0.195993s" Oct 2 20:22:26.784249 systemd[1]: Started containerd.service. Oct 2 20:22:26.898791 coreos-metadata[1029]: Oct 02 20:22:26.895 INFO Fetch successful Oct 2 20:22:26.898891 extend-filesystems[1086]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Oct 2 20:22:26.898891 extend-filesystems[1086]: old_desc_blocks = 1, new_desc_blocks = 3 Oct 2 20:22:26.898891 extend-filesystems[1086]: The filesystem on /dev/vda9 is now 4635643 (4k) blocks long. Oct 2 20:22:26.896289 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 20:22:26.925428 extend-filesystems[1034]: Resized filesystem in /dev/vda9 Oct 2 20:22:26.896505 systemd[1]: Finished extend-filesystems.service. Oct 2 20:22:26.901139 unknown[1029]: wrote ssh authorized keys file for user: core Oct 2 20:22:26.956008 update-ssh-keys[1093]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:22:26.955898 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 20:22:26.984068 tar[1046]: ./host-local Oct 2 20:22:27.047108 tar[1046]: ./vrf Oct 2 20:22:27.104309 tar[1046]: ./bridge Oct 2 20:22:27.176965 tar[1046]: ./tuning Oct 2 20:22:27.241852 tar[1046]: ./firewall Oct 2 20:22:27.314700 tar[1046]: ./host-device Oct 2 20:22:27.352238 systemd[1]: Finished prepare-critools.service. Oct 2 20:22:27.367501 tar[1046]: ./sbr Oct 2 20:22:27.401873 tar[1046]: ./loopback Oct 2 20:22:27.435763 tar[1046]: ./dhcp Oct 2 20:22:27.531709 tar[1046]: ./ptp Oct 2 20:22:27.572690 tar[1046]: ./ipvlan Oct 2 20:22:27.613245 tar[1046]: ./bandwidth Oct 2 20:22:27.665214 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 20:22:27.671887 locksmithd[1090]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 20:22:28.643100 sshd_keygen[1062]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 20:22:28.681252 systemd[1]: Finished sshd-keygen.service. Oct 2 20:22:28.685806 systemd[1]: Starting issuegen.service... Oct 2 20:22:28.692622 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 20:22:28.692794 systemd[1]: Finished issuegen.service. Oct 2 20:22:28.694713 systemd[1]: Starting systemd-user-sessions.service... Oct 2 20:22:28.707813 systemd[1]: Finished systemd-user-sessions.service. Oct 2 20:22:28.709611 systemd[1]: Started getty@tty1.service. Oct 2 20:22:28.711342 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 20:22:28.712005 systemd[1]: Reached target getty.target. Oct 2 20:22:28.712578 systemd[1]: Reached target multi-user.target. Oct 2 20:22:28.714334 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 20:22:28.725889 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 20:22:28.726280 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 20:22:28.727892 systemd[1]: Startup finished in 884ms (kernel) + 14.541s (initrd) + 10.511s (userspace) = 25.937s. Oct 2 20:22:36.444440 systemd[1]: Created slice system-sshd.slice. Oct 2 20:22:36.448005 systemd[1]: Started sshd@0-172.24.4.85:22-172.24.4.1:50814.service. Oct 2 20:22:38.677185 sshd[1117]: Accepted publickey for core from 172.24.4.1 port 50814 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:22:38.681637 sshd[1117]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:22:38.706363 systemd[1]: Created slice user-500.slice. Oct 2 20:22:38.709300 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 20:22:38.721078 systemd-logind[1040]: New session 1 of user core. Oct 2 20:22:38.730712 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 20:22:38.734730 systemd[1]: Starting user@500.service... Oct 2 20:22:38.741630 (systemd)[1120]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:22:38.868635 systemd[1120]: Queued start job for default target default.target. Oct 2 20:22:38.869122 systemd[1120]: Reached target paths.target. Oct 2 20:22:38.869143 systemd[1120]: Reached target sockets.target. Oct 2 20:22:38.869158 systemd[1120]: Reached target timers.target. Oct 2 20:22:38.869172 systemd[1120]: Reached target basic.target. Oct 2 20:22:38.869266 systemd[1]: Started user@500.service. Oct 2 20:22:38.870107 systemd[1]: Started session-1.scope. Oct 2 20:22:38.870501 systemd[1120]: Reached target default.target. Oct 2 20:22:38.870648 systemd[1120]: Startup finished in 116ms. Oct 2 20:22:39.395600 systemd[1]: Started sshd@1-172.24.4.85:22-172.24.4.1:50820.service. Oct 2 20:22:40.636477 sshd[1129]: Accepted publickey for core from 172.24.4.1 port 50820 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:22:40.639621 sshd[1129]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:22:40.649502 systemd-logind[1040]: New session 2 of user core. Oct 2 20:22:40.650831 systemd[1]: Started session-2.scope. Oct 2 20:22:41.325039 sshd[1129]: pam_unix(sshd:session): session closed for user core Oct 2 20:22:41.331403 systemd[1]: Started sshd@2-172.24.4.85:22-172.24.4.1:50826.service. Oct 2 20:22:41.336041 systemd[1]: sshd@1-172.24.4.85:22-172.24.4.1:50820.service: Deactivated successfully. Oct 2 20:22:41.337476 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 20:22:41.339811 systemd-logind[1040]: Session 2 logged out. Waiting for processes to exit. Oct 2 20:22:41.341857 systemd-logind[1040]: Removed session 2. Oct 2 20:22:42.588775 sshd[1134]: Accepted publickey for core from 172.24.4.1 port 50826 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:22:42.591564 sshd[1134]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:22:42.602492 systemd[1]: Started session-3.scope. Oct 2 20:22:42.603948 systemd-logind[1040]: New session 3 of user core. Oct 2 20:22:43.138534 sshd[1134]: pam_unix(sshd:session): session closed for user core Oct 2 20:22:43.144153 systemd[1]: Started sshd@3-172.24.4.85:22-172.24.4.1:50830.service. Oct 2 20:22:43.149264 systemd[1]: sshd@2-172.24.4.85:22-172.24.4.1:50826.service: Deactivated successfully. Oct 2 20:22:43.150808 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 20:22:43.153527 systemd-logind[1040]: Session 3 logged out. Waiting for processes to exit. Oct 2 20:22:43.156188 systemd-logind[1040]: Removed session 3. Oct 2 20:22:44.399782 sshd[1140]: Accepted publickey for core from 172.24.4.1 port 50830 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:22:44.402941 sshd[1140]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:22:44.414020 systemd[1]: Started session-4.scope. Oct 2 20:22:44.415203 systemd-logind[1040]: New session 4 of user core. Oct 2 20:22:45.088611 sshd[1140]: pam_unix(sshd:session): session closed for user core Oct 2 20:22:45.094634 systemd[1]: Started sshd@4-172.24.4.85:22-172.24.4.1:52796.service. Oct 2 20:22:45.098189 systemd[1]: sshd@3-172.24.4.85:22-172.24.4.1:50830.service: Deactivated successfully. Oct 2 20:22:45.099821 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 20:22:45.102493 systemd-logind[1040]: Session 4 logged out. Waiting for processes to exit. Oct 2 20:22:45.105539 systemd-logind[1040]: Removed session 4. Oct 2 20:22:46.487235 sshd[1146]: Accepted publickey for core from 172.24.4.1 port 52796 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:22:46.490933 sshd[1146]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:22:46.501172 systemd-logind[1040]: New session 5 of user core. Oct 2 20:22:46.501895 systemd[1]: Started session-5.scope. Oct 2 20:22:46.934723 sudo[1150]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 20:22:46.935223 sudo[1150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:22:46.948665 dbus-daemon[1030]: Ѝ\u001590V: received setenforce notice (enforcing=2111877008) Oct 2 20:22:46.952243 sudo[1150]: pam_unix(sudo:session): session closed for user root Oct 2 20:22:47.173811 sshd[1146]: pam_unix(sshd:session): session closed for user core Oct 2 20:22:47.180284 systemd[1]: Started sshd@5-172.24.4.85:22-172.24.4.1:52810.service. Oct 2 20:22:47.183160 systemd[1]: sshd@4-172.24.4.85:22-172.24.4.1:52796.service: Deactivated successfully. Oct 2 20:22:47.184580 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 20:22:47.188000 systemd-logind[1040]: Session 5 logged out. Waiting for processes to exit. Oct 2 20:22:47.191212 systemd-logind[1040]: Removed session 5. Oct 2 20:22:48.437983 sshd[1153]: Accepted publickey for core from 172.24.4.1 port 52810 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:22:48.442216 sshd[1153]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:22:48.453209 systemd-logind[1040]: New session 6 of user core. Oct 2 20:22:48.454144 systemd[1]: Started session-6.scope. Oct 2 20:22:48.854149 sudo[1158]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 20:22:48.855467 sudo[1158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:22:48.862143 sudo[1158]: pam_unix(sudo:session): session closed for user root Oct 2 20:22:48.872239 sudo[1157]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 20:22:48.872782 sudo[1157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:22:48.893647 systemd[1]: Stopping audit-rules.service... Oct 2 20:22:48.894000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:22:48.898039 kernel: kauditd_printk_skb: 129 callbacks suppressed Oct 2 20:22:48.898166 kernel: audit: type=1305 audit(1696278168.894:171): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:22:48.894000 audit[1161]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe9dcae9a0 a2=420 a3=0 items=0 ppid=1 pid=1161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:48.903488 auditctl[1161]: No rules Oct 2 20:22:48.914057 kernel: audit: type=1300 audit(1696278168.894:171): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe9dcae9a0 a2=420 a3=0 items=0 ppid=1 pid=1161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:48.904569 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 20:22:48.904925 systemd[1]: Stopped audit-rules.service. Oct 2 20:22:48.894000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:22:48.915939 systemd[1]: Starting audit-rules.service... Oct 2 20:22:48.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:48.926422 kernel: audit: type=1327 audit(1696278168.894:171): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:22:48.926535 kernel: audit: type=1131 audit(1696278168.902:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:48.963960 augenrules[1178]: No rules Oct 2 20:22:48.965733 systemd[1]: Finished audit-rules.service. Oct 2 20:22:48.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:48.967798 sudo[1157]: pam_unix(sudo:session): session closed for user root Oct 2 20:22:48.975384 kernel: audit: type=1130 audit(1696278168.964:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:48.966000 audit[1157]: USER_END pid=1157 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:22:48.966000 audit[1157]: CRED_DISP pid=1157 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:22:48.989763 kernel: audit: type=1106 audit(1696278168.966:174): pid=1157 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:22:48.989863 kernel: audit: type=1104 audit(1696278168.966:175): pid=1157 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:22:49.119473 sshd[1153]: pam_unix(sshd:session): session closed for user core Oct 2 20:22:49.123000 audit[1153]: USER_END pid=1153 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:22:49.126573 systemd[1]: Started sshd@6-172.24.4.85:22-172.24.4.1:52824.service. Oct 2 20:22:49.144511 kernel: audit: type=1106 audit(1696278169.123:176): pid=1153 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:22:49.129072 systemd[1]: sshd@5-172.24.4.85:22-172.24.4.1:52810.service: Deactivated successfully. Oct 2 20:22:49.130619 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 20:22:49.149267 systemd-logind[1040]: Session 6 logged out. Waiting for processes to exit. Oct 2 20:22:49.123000 audit[1153]: CRED_DISP pid=1153 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:22:49.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.85:22-172.24.4.1:52824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:49.168095 kernel: audit: type=1104 audit(1696278169.123:177): pid=1153 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:22:49.168204 kernel: audit: type=1130 audit(1696278169.126:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.85:22-172.24.4.1:52824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:49.128000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.24.4.85:22-172.24.4.1:52810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:49.168789 systemd-logind[1040]: Removed session 6. Oct 2 20:22:50.391000 audit[1183]: USER_ACCT pid=1183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:22:50.393431 sshd[1183]: Accepted publickey for core from 172.24.4.1 port 52824 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:22:50.394000 audit[1183]: CRED_ACQ pid=1183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:22:50.394000 audit[1183]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd0e95c0b0 a2=3 a3=0 items=0 ppid=1 pid=1183 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:50.394000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:22:50.395796 sshd[1183]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:22:50.405569 systemd-logind[1040]: New session 7 of user core. Oct 2 20:22:50.406382 systemd[1]: Started session-7.scope. Oct 2 20:22:50.417000 audit[1183]: USER_START pid=1183 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:22:50.420000 audit[1186]: CRED_ACQ pid=1186 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:22:50.810000 audit[1187]: USER_ACCT pid=1187 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:22:50.812463 sudo[1187]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 20:22:50.811000 audit[1187]: CRED_REFR pid=1187 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:22:50.812936 sudo[1187]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:22:50.815000 audit[1187]: USER_START pid=1187 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:22:51.480150 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:22:51.486729 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:22:51.486000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:51.487190 systemd[1]: Reached target network-online.target. Oct 2 20:22:51.488775 systemd[1]: Starting docker.service... Oct 2 20:22:51.544873 env[1203]: time="2023-10-02T20:22:51.544792263Z" level=info msg="Starting up" Oct 2 20:22:51.548053 env[1203]: time="2023-10-02T20:22:51.547824939Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:22:51.548053 env[1203]: time="2023-10-02T20:22:51.547864738Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:22:51.548053 env[1203]: time="2023-10-02T20:22:51.547910654Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:22:51.548053 env[1203]: time="2023-10-02T20:22:51.547932073Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:22:51.550612 env[1203]: time="2023-10-02T20:22:51.550564500Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:22:51.550612 env[1203]: time="2023-10-02T20:22:51.550602765Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:22:51.550826 env[1203]: time="2023-10-02T20:22:51.550627654Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:22:51.550826 env[1203]: time="2023-10-02T20:22:51.550645402Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:22:51.636390 env[1203]: time="2023-10-02T20:22:51.636285858Z" level=info msg="Loading containers: start." Oct 2 20:22:51.744000 audit[1234]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1234 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.744000 audit[1234]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffeac44d470 a2=0 a3=7ffeac44d45c items=0 ppid=1203 pid=1234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.744000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 20:22:51.748000 audit[1236]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1236 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.748000 audit[1236]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffccd35bb60 a2=0 a3=7ffccd35bb4c items=0 ppid=1203 pid=1236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.748000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 20:22:51.752000 audit[1238]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1238 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.752000 audit[1238]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc3b7ec1e0 a2=0 a3=7ffc3b7ec1cc items=0 ppid=1203 pid=1238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.752000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:22:51.755000 audit[1240]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1240 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.755000 audit[1240]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe64f57ae0 a2=0 a3=7ffe64f57acc items=0 ppid=1203 pid=1240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.755000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:22:51.760000 audit[1242]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1242 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.760000 audit[1242]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffaff5daa0 a2=0 a3=7fffaff5da8c items=0 ppid=1203 pid=1242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.760000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 20:22:51.772000 audit[1247]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1247 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.772000 audit[1247]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc3c6c6840 a2=0 a3=7ffc3c6c682c items=0 ppid=1203 pid=1247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.772000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 20:22:51.790000 audit[1249]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1249 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.790000 audit[1249]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe21400060 a2=0 a3=7ffe2140004c items=0 ppid=1203 pid=1249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.790000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 20:22:51.794000 audit[1251]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1251 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.794000 audit[1251]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffe48735480 a2=0 a3=7ffe4873546c items=0 ppid=1203 pid=1251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.794000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 20:22:51.798000 audit[1253]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.798000 audit[1253]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fffaf4ff650 a2=0 a3=7fffaf4ff63c items=0 ppid=1203 pid=1253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.798000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:22:51.812000 audit[1257]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1257 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.812000 audit[1257]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc48224cf0 a2=0 a3=7ffc48224cdc items=0 ppid=1203 pid=1257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.812000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:22:51.814000 audit[1258]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1258 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.814000 audit[1258]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffb2b0d000 a2=0 a3=7fffb2b0cfec items=0 ppid=1203 pid=1258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.814000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:22:51.836381 kernel: Initializing XFRM netlink socket Oct 2 20:22:51.895420 env[1203]: time="2023-10-02T20:22:51.895355193Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 20:22:51.930000 audit[1266]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1266 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.930000 audit[1266]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7fff76c9b470 a2=0 a3=7fff76c9b45c items=0 ppid=1203 pid=1266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.930000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 20:22:51.942000 audit[1269]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1269 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.942000 audit[1269]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fff1820b720 a2=0 a3=7fff1820b70c items=0 ppid=1203 pid=1269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.942000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 20:22:51.946000 audit[1272]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.946000 audit[1272]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd1ebdcd60 a2=0 a3=7ffd1ebdcd4c items=0 ppid=1203 pid=1272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.946000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 20:22:51.948000 audit[1274]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1274 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.948000 audit[1274]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff15d80610 a2=0 a3=7fff15d805fc items=0 ppid=1203 pid=1274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.948000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 20:22:51.950000 audit[1276]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.950000 audit[1276]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe2c3d57c0 a2=0 a3=7ffe2c3d57ac items=0 ppid=1203 pid=1276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.950000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 20:22:51.952000 audit[1278]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.952000 audit[1278]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffd27e0db50 a2=0 a3=7ffd27e0db3c items=0 ppid=1203 pid=1278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.952000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 20:22:51.954000 audit[1280]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1280 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.954000 audit[1280]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffdaaaba8a0 a2=0 a3=7ffdaaaba88c items=0 ppid=1203 pid=1280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.954000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 20:22:51.964000 audit[1283]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1283 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.964000 audit[1283]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fffa216c9d0 a2=0 a3=7fffa216c9bc items=0 ppid=1203 pid=1283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.964000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 20:22:51.965000 audit[1285]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1285 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.965000 audit[1285]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffe39a5c4c0 a2=0 a3=7ffe39a5c4ac items=0 ppid=1203 pid=1285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.965000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:22:51.967000 audit[1287]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1287 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.967000 audit[1287]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffc5c440f70 a2=0 a3=7ffc5c440f5c items=0 ppid=1203 pid=1287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.967000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:22:51.969000 audit[1289]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.969000 audit[1289]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd763a7f00 a2=0 a3=7ffd763a7eec items=0 ppid=1203 pid=1289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.969000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 20:22:51.971101 systemd-networkd[972]: docker0: Link UP Oct 2 20:22:51.979000 audit[1293]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1293 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.979000 audit[1293]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd996cc3c0 a2=0 a3=7ffd996cc3ac items=0 ppid=1203 pid=1293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.979000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:22:51.980000 audit[1294]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1294 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:22:51.980000 audit[1294]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffcd3a4e070 a2=0 a3=7ffcd3a4e05c items=0 ppid=1203 pid=1294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:22:51.980000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:22:51.982689 env[1203]: time="2023-10-02T20:22:51.982654473Z" level=info msg="Loading containers: done." Oct 2 20:22:51.996216 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1583350904-merged.mount: Deactivated successfully. Oct 2 20:22:52.020167 env[1203]: time="2023-10-02T20:22:52.020113639Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 20:22:52.020724 env[1203]: time="2023-10-02T20:22:52.020670527Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 20:22:52.021032 env[1203]: time="2023-10-02T20:22:52.021002743Z" level=info msg="Daemon has completed initialization" Oct 2 20:22:52.059266 systemd[1]: Started docker.service. Oct 2 20:22:52.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:52.070290 env[1203]: time="2023-10-02T20:22:52.070105203Z" level=info msg="API listen on /run/docker.sock" Oct 2 20:22:52.116418 systemd[1]: Reloading. Oct 2 20:22:52.245438 /usr/lib/systemd/system-generators/torcx-generator[1342]: time="2023-10-02T20:22:52Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:22:52.251383 /usr/lib/systemd/system-generators/torcx-generator[1342]: time="2023-10-02T20:22:52Z" level=info msg="torcx already run" Oct 2 20:22:52.313953 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:22:52.313973 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:22:52.337167 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.408000 audit: BPF prog-id=37 op=LOAD Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.409000 audit: BPF prog-id=38 op=LOAD Oct 2 20:22:52.409000 audit: BPF prog-id=24 op=UNLOAD Oct 2 20:22:52.409000 audit: BPF prog-id=25 op=UNLOAD Oct 2 20:22:52.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.410000 audit: BPF prog-id=39 op=LOAD Oct 2 20:22:52.410000 audit: BPF prog-id=32 op=UNLOAD Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit: BPF prog-id=40 op=LOAD Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.411000 audit: BPF prog-id=41 op=LOAD Oct 2 20:22:52.411000 audit: BPF prog-id=33 op=UNLOAD Oct 2 20:22:52.411000 audit: BPF prog-id=34 op=UNLOAD Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit: BPF prog-id=42 op=LOAD Oct 2 20:22:52.413000 audit: BPF prog-id=27 op=UNLOAD Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit: BPF prog-id=43 op=LOAD Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.413000 audit: BPF prog-id=44 op=LOAD Oct 2 20:22:52.414000 audit: BPF prog-id=28 op=UNLOAD Oct 2 20:22:52.414000 audit: BPF prog-id=29 op=UNLOAD Oct 2 20:22:52.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.415000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.415000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.415000 audit: BPF prog-id=45 op=LOAD Oct 2 20:22:52.415000 audit: BPF prog-id=35 op=UNLOAD Oct 2 20:22:52.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.416000 audit: BPF prog-id=46 op=LOAD Oct 2 20:22:52.416000 audit: BPF prog-id=26 op=UNLOAD Oct 2 20:22:52.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.418000 audit: BPF prog-id=47 op=LOAD Oct 2 20:22:52.418000 audit: BPF prog-id=30 op=UNLOAD Oct 2 20:22:52.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.418000 audit: BPF prog-id=48 op=LOAD Oct 2 20:22:52.418000 audit: BPF prog-id=31 op=UNLOAD Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit: BPF prog-id=49 op=LOAD Oct 2 20:22:52.420000 audit: BPF prog-id=21 op=UNLOAD Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit: BPF prog-id=50 op=LOAD Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:22:52.420000 audit: BPF prog-id=51 op=LOAD Oct 2 20:22:52.420000 audit: BPF prog-id=22 op=UNLOAD Oct 2 20:22:52.420000 audit: BPF prog-id=23 op=UNLOAD Oct 2 20:22:52.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:22:52.434197 systemd[1]: Started kubelet.service. Oct 2 20:22:52.526979 kubelet[1386]: E1002 20:22:52.526861 1386 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 20:22:52.532219 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:22:52.532400 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:22:52.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:22:53.569895 env[1045]: time="2023-10-02T20:22:53.569723716Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 20:22:54.393098 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3630314792.mount: Deactivated successfully. Oct 2 20:22:57.636704 env[1045]: time="2023-10-02T20:22:57.636596666Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:22:57.641914 env[1045]: time="2023-10-02T20:22:57.639491485Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:22:57.647406 env[1045]: time="2023-10-02T20:22:57.644766289Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:22:57.652387 env[1045]: time="2023-10-02T20:22:57.652292705Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2\"" Oct 2 20:22:57.653837 env[1045]: time="2023-10-02T20:22:57.650195442Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:22:57.665314 env[1045]: time="2023-10-02T20:22:57.665262565Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 20:23:01.006347 env[1045]: time="2023-10-02T20:23:01.006232425Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:01.009331 env[1045]: time="2023-10-02T20:23:01.009292244Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:01.013000 env[1045]: time="2023-10-02T20:23:01.012978134Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:01.017361 env[1045]: time="2023-10-02T20:23:01.017337935Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:01.019634 env[1045]: time="2023-10-02T20:23:01.019609606Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c\"" Oct 2 20:23:01.033756 env[1045]: time="2023-10-02T20:23:01.033706674Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 20:23:02.552707 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 20:23:02.565239 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 20:23:02.565407 kernel: audit: type=1130 audit(1696278182.552:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:02.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:02.553168 systemd[1]: Stopped kubelet.service. Oct 2 20:23:02.556529 systemd[1]: Started kubelet.service. Oct 2 20:23:02.552000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:02.574341 kernel: audit: type=1131 audit(1696278182.552:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:02.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:02.583374 kernel: audit: type=1130 audit(1696278182.555:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:02.661537 kubelet[1416]: E1002 20:23:02.661487 1416 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 20:23:02.665000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:23:02.665443 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:23:02.665577 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:23:02.670342 kernel: audit: type=1131 audit(1696278182.665:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:23:03.361950 env[1045]: time="2023-10-02T20:23:03.361869330Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:03.370389 env[1045]: time="2023-10-02T20:23:03.370289359Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:03.373354 env[1045]: time="2023-10-02T20:23:03.373261443Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:03.375657 env[1045]: time="2023-10-02T20:23:03.375611547Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:03.376585 env[1045]: time="2023-10-02T20:23:03.376538023Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999\"" Oct 2 20:23:03.398213 env[1045]: time="2023-10-02T20:23:03.398149596Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 20:23:04.823117 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2465362352.mount: Deactivated successfully. Oct 2 20:23:06.122216 env[1045]: time="2023-10-02T20:23:06.122053396Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:06.134209 env[1045]: time="2023-10-02T20:23:06.134156261Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:06.139628 env[1045]: time="2023-10-02T20:23:06.139557815Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:06.140966 env[1045]: time="2023-10-02T20:23:06.140913507Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:06.143839 env[1045]: time="2023-10-02T20:23:06.143778763Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad\"" Oct 2 20:23:06.157381 env[1045]: time="2023-10-02T20:23:06.157287351Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 20:23:06.771184 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2781398244.mount: Deactivated successfully. Oct 2 20:23:06.787953 env[1045]: time="2023-10-02T20:23:06.787879865Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:06.791366 env[1045]: time="2023-10-02T20:23:06.791265748Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:06.795855 env[1045]: time="2023-10-02T20:23:06.795790573Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:06.800507 env[1045]: time="2023-10-02T20:23:06.800429548Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:06.803169 env[1045]: time="2023-10-02T20:23:06.803072082Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 20:23:06.821607 env[1045]: time="2023-10-02T20:23:06.821499504Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 20:23:08.194761 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1728278850.mount: Deactivated successfully. Oct 2 20:23:11.811426 update_engine[1041]: I1002 20:23:11.811326 1041 update_attempter.cc:505] Updating boot flags... Oct 2 20:23:12.802074 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 20:23:12.802287 systemd[1]: Stopped kubelet.service. Oct 2 20:23:12.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:12.801000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:12.803762 systemd[1]: Started kubelet.service. Oct 2 20:23:12.810968 kernel: audit: type=1130 audit(1696278192.801:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:12.811058 kernel: audit: type=1131 audit(1696278192.801:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:12.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:12.817340 kernel: audit: type=1130 audit(1696278192.802:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:12.915580 kubelet[1454]: E1002 20:23:12.915527 1454 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 20:23:12.917440 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:23:12.917569 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:23:12.923321 kernel: audit: type=1131 audit(1696278192.916:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:23:12.916000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:23:15.386850 env[1045]: time="2023-10-02T20:23:15.386689693Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:15.389976 env[1045]: time="2023-10-02T20:23:15.389851303Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:15.394219 env[1045]: time="2023-10-02T20:23:15.394154224Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:15.398281 env[1045]: time="2023-10-02T20:23:15.398223035Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:15.400269 env[1045]: time="2023-10-02T20:23:15.400210297Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 20:23:15.426481 env[1045]: time="2023-10-02T20:23:15.426401657Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 20:23:16.610639 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount8828232.mount: Deactivated successfully. Oct 2 20:23:17.733784 env[1045]: time="2023-10-02T20:23:17.733652537Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:17.738143 env[1045]: time="2023-10-02T20:23:17.738100758Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:17.740078 env[1045]: time="2023-10-02T20:23:17.740037032Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:17.742088 env[1045]: time="2023-10-02T20:23:17.742046621Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:17.742373 env[1045]: time="2023-10-02T20:23:17.742337973Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 20:23:21.803735 systemd[1]: Stopped kubelet.service. Oct 2 20:23:21.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:21.804000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:21.811752 kernel: audit: type=1130 audit(1696278201.802:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:21.811865 kernel: audit: type=1131 audit(1696278201.804:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:21.833941 systemd[1]: Reloading. Oct 2 20:23:21.957292 /usr/lib/systemd/system-generators/torcx-generator[1546]: time="2023-10-02T20:23:21Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:23:21.957356 /usr/lib/systemd/system-generators/torcx-generator[1546]: time="2023-10-02T20:23:21Z" level=info msg="torcx already run" Oct 2 20:23:22.035647 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:23:22.035802 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:23:22.058103 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:23:22.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134345 kernel: audit: type=1400 audit(1696278202.125:398): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.140189 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:23:22.140238 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:23:22.140261 kernel: audit: backlog limit exceeded Oct 2 20:23:22.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.150923 kernel: audit: type=1400 audit(1696278202.125:399): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.150977 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:23:22.151001 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:23:22.151024 kernel: audit: backlog limit exceeded Oct 2 20:23:22.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.132000 audit: BPF prog-id=52 op=LOAD Oct 2 20:23:22.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.132000 audit: BPF prog-id=53 op=LOAD Oct 2 20:23:22.132000 audit: BPF prog-id=37 op=UNLOAD Oct 2 20:23:22.132000 audit: BPF prog-id=38 op=UNLOAD Oct 2 20:23:22.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit: BPF prog-id=54 op=LOAD Oct 2 20:23:22.134000 audit: BPF prog-id=39 op=UNLOAD Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit: BPF prog-id=55 op=LOAD Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.134000 audit: BPF prog-id=56 op=LOAD Oct 2 20:23:22.134000 audit: BPF prog-id=40 op=UNLOAD Oct 2 20:23:22.134000 audit: BPF prog-id=41 op=UNLOAD Oct 2 20:23:22.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.139000 audit: BPF prog-id=42 op=UNLOAD Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit: BPF prog-id=58 op=LOAD Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.152000 audit: BPF prog-id=59 op=LOAD Oct 2 20:23:22.152000 audit: BPF prog-id=43 op=UNLOAD Oct 2 20:23:22.152000 audit: BPF prog-id=44 op=UNLOAD Oct 2 20:23:22.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.155000 audit: BPF prog-id=60 op=LOAD Oct 2 20:23:22.155000 audit: BPF prog-id=45 op=UNLOAD Oct 2 20:23:22.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.156000 audit: BPF prog-id=61 op=LOAD Oct 2 20:23:22.156000 audit: BPF prog-id=46 op=UNLOAD Oct 2 20:23:22.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.157000 audit: BPF prog-id=62 op=LOAD Oct 2 20:23:22.157000 audit: BPF prog-id=47 op=UNLOAD Oct 2 20:23:22.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.159000 audit: BPF prog-id=63 op=LOAD Oct 2 20:23:22.159000 audit: BPF prog-id=48 op=UNLOAD Oct 2 20:23:22.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.161000 audit: BPF prog-id=64 op=LOAD Oct 2 20:23:22.161000 audit: BPF prog-id=49 op=UNLOAD Oct 2 20:23:22.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.161000 audit: BPF prog-id=65 op=LOAD Oct 2 20:23:22.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:22.162000 audit: BPF prog-id=66 op=LOAD Oct 2 20:23:22.162000 audit: BPF prog-id=50 op=UNLOAD Oct 2 20:23:22.162000 audit: BPF prog-id=51 op=UNLOAD Oct 2 20:23:22.183817 systemd[1]: Started kubelet.service. Oct 2 20:23:22.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:22.250975 kubelet[1594]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:23:22.251344 kubelet[1594]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:23:22.251478 kubelet[1594]: I1002 20:23:22.251448 1594 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:23:22.252945 kubelet[1594]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:23:22.253006 kubelet[1594]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:23:23.017155 kubelet[1594]: I1002 20:23:23.017094 1594 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 20:23:23.017155 kubelet[1594]: I1002 20:23:23.017157 1594 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:23:23.017789 kubelet[1594]: I1002 20:23:23.017751 1594 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 20:23:23.024453 kubelet[1594]: I1002 20:23:23.024437 1594 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:23:23.024750 kubelet[1594]: E1002 20:23:23.024736 1594 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.85:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:23.031230 kubelet[1594]: I1002 20:23:23.031153 1594 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:23:23.031741 kubelet[1594]: I1002 20:23:23.031706 1594 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:23:23.031903 kubelet[1594]: I1002 20:23:23.031858 1594 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 20:23:23.031994 kubelet[1594]: I1002 20:23:23.031927 1594 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:23:23.031994 kubelet[1594]: I1002 20:23:23.031959 1594 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 20:23:23.032171 kubelet[1594]: I1002 20:23:23.032145 1594 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:23:23.038477 kubelet[1594]: I1002 20:23:23.038464 1594 kubelet.go:398] "Attempting to sync node with API server" Oct 2 20:23:23.038576 kubelet[1594]: I1002 20:23:23.038566 1594 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:23:23.038652 kubelet[1594]: I1002 20:23:23.038643 1594 kubelet.go:297] "Adding apiserver pod source" Oct 2 20:23:23.038721 kubelet[1594]: I1002 20:23:23.038712 1594 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:23:23.039773 kubelet[1594]: I1002 20:23:23.039737 1594 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:23:23.040249 kubelet[1594]: W1002 20:23:23.040215 1594 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 20:23:23.041149 kubelet[1594]: I1002 20:23:23.041118 1594 server.go:1186] "Started kubelet" Oct 2 20:23:23.041458 kubelet[1594]: W1002 20:23:23.041375 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.24.4.85:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-7-ba0a608fa7.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:23.041508 kubelet[1594]: E1002 20:23:23.041488 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.85:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-7-ba0a608fa7.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:23.043585 kubelet[1594]: I1002 20:23:23.043548 1594 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:23:23.047000 audit[1594]: AVC avc: denied { mac_admin } for pid=1594 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:23.047000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:23:23.047000 audit[1594]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e2fc50 a1=c001010d38 a2=c000e2fc20 a3=25 items=0 ppid=1 pid=1594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.047000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:23:23.049332 kubelet[1594]: I1002 20:23:23.049005 1594 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:23:23.048000 audit[1594]: AVC avc: denied { mac_admin } for pid=1594 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:23.048000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:23:23.048000 audit[1594]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c001014580 a1=c001010d50 a2=c000e2fce0 a3=25 items=0 ppid=1 pid=1594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.048000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:23:23.049609 kubelet[1594]: I1002 20:23:23.049596 1594 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:23:23.049731 kubelet[1594]: I1002 20:23:23.049719 1594 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:23:23.049952 kubelet[1594]: I1002 20:23:23.049906 1594 server.go:451] "Adding debug handlers to kubelet server" Oct 2 20:23:23.053592 kubelet[1594]: W1002 20:23:23.053553 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.24.4.85:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:23.053707 kubelet[1594]: E1002 20:23:23.053694 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.85:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:23.056175 kubelet[1594]: E1002 20:23:23.056160 1594 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:23:23.056267 kubelet[1594]: E1002 20:23:23.056257 1594 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:23:23.058012 kubelet[1594]: E1002 20:23:23.057936 1594 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510-3-0-7-ba0a608fa7.novalocal.178a6409d480568f", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510-3-0-7-ba0a608fa7.novalocal", UID:"ci-3510-3-0-7-ba0a608fa7.novalocal", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510-3-0-7-ba0a608fa7.novalocal"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 23, 23, 41076879, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 23, 23, 41076879, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.24.4.85:6443/api/v1/namespaces/default/events": dial tcp 172.24.4.85:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:23:23.058205 kubelet[1594]: E1002 20:23:23.058186 1594 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://172.24.4.85:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-7-ba0a608fa7.novalocal?timeout=10s": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:23.060850 kubelet[1594]: I1002 20:23:23.060811 1594 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 20:23:23.060991 kubelet[1594]: I1002 20:23:23.060962 1594 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:23:23.064000 audit[1605]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1605 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.064000 audit[1605]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffeb1331f0 a2=0 a3=7fffeb1331dc items=0 ppid=1594 pid=1605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.064000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:23:23.065989 kubelet[1594]: W1002 20:23:23.065954 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.24.4.85:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:23.066074 kubelet[1594]: E1002 20:23:23.066063 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.85:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:23.066000 audit[1606]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1606 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.066000 audit[1606]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc658eebb0 a2=0 a3=7ffc658eeb9c items=0 ppid=1594 pid=1606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.066000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:23:23.070000 audit[1608]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1608 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.070000 audit[1608]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd1981d080 a2=0 a3=7ffd1981d06c items=0 ppid=1594 pid=1608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.070000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:23:23.077000 audit[1612]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1612 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.077000 audit[1612]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc2adcb590 a2=0 a3=7ffc2adcb57c items=0 ppid=1594 pid=1612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.077000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:23:23.093670 kubelet[1594]: I1002 20:23:23.093653 1594 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:23:23.093782 kubelet[1594]: I1002 20:23:23.093772 1594 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:23:23.093847 kubelet[1594]: I1002 20:23:23.093838 1594 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:23:23.095000 audit[1615]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1615 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.095000 audit[1615]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffdc383e8f0 a2=0 a3=7ffdc383e8dc items=0 ppid=1594 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.095000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 20:23:23.096000 audit[1616]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=1616 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.096000 audit[1616]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffebdf1d050 a2=0 a3=7ffebdf1d03c items=0 ppid=1594 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.096000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 20:23:23.099282 kubelet[1594]: I1002 20:23:23.099268 1594 policy_none.go:49] "None policy: Start" Oct 2 20:23:23.100273 kubelet[1594]: I1002 20:23:23.100262 1594 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:23:23.100371 kubelet[1594]: I1002 20:23:23.100361 1594 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:23:23.108378 systemd[1]: Created slice kubepods.slice. Oct 2 20:23:23.117829 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 20:23:23.116000 audit[1620]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=1620 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.116000 audit[1620]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd06571eb0 a2=0 a3=7ffd06571e9c items=0 ppid=1594 pid=1620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.116000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 20:23:23.122340 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 20:23:23.124000 audit[1623]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=1623 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.124000 audit[1623]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffc704b34d0 a2=0 a3=7ffc704b34bc items=0 ppid=1594 pid=1623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.124000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 20:23:23.125000 audit[1624]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1624 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.125000 audit[1624]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffca43f75c0 a2=0 a3=7ffca43f75ac items=0 ppid=1594 pid=1624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.125000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 20:23:23.126000 audit[1625]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1625 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.126000 audit[1625]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd5b9113c0 a2=0 a3=7ffd5b9113ac items=0 ppid=1594 pid=1625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.126000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:23:23.128261 kubelet[1594]: I1002 20:23:23.128238 1594 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:23:23.127000 audit[1594]: AVC avc: denied { mac_admin } for pid=1594 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:23.127000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:23:23.127000 audit[1594]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b9ae10 a1=c000b5bd10 a2=c000b9ade0 a3=25 items=0 ppid=1 pid=1594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.127000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:23:23.128632 kubelet[1594]: I1002 20:23:23.128621 1594 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:23:23.128877 kubelet[1594]: I1002 20:23:23.128865 1594 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:23:23.131137 kubelet[1594]: E1002 20:23:23.131123 1594 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" not found" Oct 2 20:23:23.132000 audit[1627]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=1627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.132000 audit[1627]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffced9fb320 a2=0 a3=7ffced9fb30c items=0 ppid=1594 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.132000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 20:23:23.134000 audit[1629]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=1629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.134000 audit[1629]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffe7c235230 a2=0 a3=7ffe7c23521c items=0 ppid=1594 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.134000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:23:23.136000 audit[1631]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=1631 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.136000 audit[1631]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffc5df79340 a2=0 a3=7ffc5df7932c items=0 ppid=1594 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.136000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 20:23:23.138000 audit[1633]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.138000 audit[1633]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffee81348a0 a2=0 a3=7ffee813488c items=0 ppid=1594 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.138000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 20:23:23.141000 audit[1635]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=1635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.141000 audit[1635]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7ffe695842d0 a2=0 a3=7ffe695842bc items=0 ppid=1594 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.141000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 20:23:23.142854 kubelet[1594]: I1002 20:23:23.142836 1594 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:23:23.142000 audit[1636]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=1636 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:23.142000 audit[1636]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd06a63c80 a2=0 a3=7ffd06a63c6c items=0 ppid=1594 pid=1636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.142000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:23:23.142000 audit[1637]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=1637 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.142000 audit[1637]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd0ed1bfb0 a2=0 a3=7ffd0ed1bf9c items=0 ppid=1594 pid=1637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.142000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:23:23.143000 audit[1638]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_chain pid=1638 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.143000 audit[1638]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd3c507380 a2=0 a3=7ffd3c50736c items=0 ppid=1594 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.143000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:23:23.143000 audit[1639]: NETFILTER_CFG table=nat:44 family=10 entries=2 op=nft_register_chain pid=1639 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:23.143000 audit[1639]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffcc8f403e0 a2=0 a3=7ffcc8f403cc items=0 ppid=1594 pid=1639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.143000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 20:23:23.144000 audit[1640]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=1640 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:23.144000 audit[1640]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdaf8696a0 a2=0 a3=7ffdaf86968c items=0 ppid=1594 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.144000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:23:23.146000 audit[1642]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=1642 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:23.146000 audit[1642]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffe7c11940 a2=0 a3=7fffe7c1192c items=0 ppid=1594 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.146000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 20:23:23.147000 audit[1643]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=1643 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:23.147000 audit[1643]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffd84c22670 a2=0 a3=7ffd84c2265c items=0 ppid=1594 pid=1643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.147000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:23:23.149000 audit[1645]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=1645 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:23.149000 audit[1645]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7fff820cc2a0 a2=0 a3=7fff820cc28c items=0 ppid=1594 pid=1645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.149000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 20:23:23.150000 audit[1646]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=1646 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:23.150000 audit[1646]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe0a443150 a2=0 a3=7ffe0a44313c items=0 ppid=1594 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.150000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 20:23:23.151000 audit[1647]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=1647 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:23.151000 audit[1647]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdd2008910 a2=0 a3=7ffdd20088fc items=0 ppid=1594 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.151000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:23:23.153000 audit[1649]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=1649 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:23.153000 audit[1649]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff874e1c50 a2=0 a3=7fff874e1c3c items=0 ppid=1594 pid=1649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.153000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 20:23:23.156664 kubelet[1594]: I1002 20:23:23.156647 1594 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:23.157156 kubelet[1594]: E1002 20:23:23.157145 1594 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.85:6443/api/v1/nodes\": dial tcp 172.24.4.85:6443: connect: connection refused" node="ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:23.156000 audit[1651]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=1651 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:23.156000 audit[1651]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffd38491b10 a2=0 a3=7ffd38491afc items=0 ppid=1594 pid=1651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.156000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:23:23.159000 audit[1653]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=1653 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:23.159000 audit[1653]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffd83c0ae60 a2=0 a3=7ffd83c0ae4c items=0 ppid=1594 pid=1653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.159000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 20:23:23.161000 audit[1655]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=1655 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:23.161000 audit[1655]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7fffa357b420 a2=0 a3=7fffa357b40c items=0 ppid=1594 pid=1655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.161000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 20:23:23.164000 audit[1657]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=1657 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:23.164000 audit[1657]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7ffd20d0b6f0 a2=0 a3=7ffd20d0b6dc items=0 ppid=1594 pid=1657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.164000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 20:23:23.166063 kubelet[1594]: I1002 20:23:23.166045 1594 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:23:23.166129 kubelet[1594]: I1002 20:23:23.166067 1594 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 20:23:23.166129 kubelet[1594]: I1002 20:23:23.166084 1594 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 20:23:23.166129 kubelet[1594]: E1002 20:23:23.166126 1594 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 20:23:23.165000 audit[1658]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=1658 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:23.165000 audit[1658]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff08c48eb0 a2=0 a3=7fff08c48e9c items=0 ppid=1594 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.165000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:23:23.167353 kubelet[1594]: W1002 20:23:23.167288 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.24.4.85:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:23.167435 kubelet[1594]: E1002 20:23:23.167425 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.85:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:23.166000 audit[1659]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=1659 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:23.166000 audit[1659]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff05c3ece0 a2=0 a3=7fff05c3eccc items=0 ppid=1594 pid=1659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.166000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:23:23.167000 audit[1660]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=1660 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:23.167000 audit[1660]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffde079e940 a2=0 a3=7ffde079e92c items=0 ppid=1594 pid=1660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:23.167000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:23:23.260004 kubelet[1594]: E1002 20:23:23.259918 1594 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://172.24.4.85:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-7-ba0a608fa7.novalocal?timeout=10s": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:23.266339 kubelet[1594]: I1002 20:23:23.266262 1594 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:23:23.269515 kubelet[1594]: I1002 20:23:23.269375 1594 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:23:23.281277 kubelet[1594]: I1002 20:23:23.281240 1594 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:23:23.284768 kubelet[1594]: I1002 20:23:23.284507 1594 status_manager.go:698] "Failed to get status for pod" podUID=8531b9597ae9560e0a1c626c8ea2c3a0 pod="kube-system/kube-scheduler-ci-3510-3-0-7-ba0a608fa7.novalocal" err="Get \"https://172.24.4.85:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510-3-0-7-ba0a608fa7.novalocal\": dial tcp 172.24.4.85:6443: connect: connection refused" Oct 2 20:23:23.285363 kubelet[1594]: I1002 20:23:23.285259 1594 status_manager.go:698] "Failed to get status for pod" podUID=0dfa1f15bab5955efb38efb9dea49cfc pod="kube-system/kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal" err="Get \"https://172.24.4.85:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal\": dial tcp 172.24.4.85:6443: connect: connection refused" Oct 2 20:23:23.294975 systemd[1]: Created slice kubepods-burstable-pod8531b9597ae9560e0a1c626c8ea2c3a0.slice. Oct 2 20:23:23.296832 kubelet[1594]: I1002 20:23:23.295971 1594 status_manager.go:698] "Failed to get status for pod" podUID=ebbc8e1f2e0303b48c8f2bbbcf17a35a pod="kube-system/kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal" err="Get \"https://172.24.4.85:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal\": dial tcp 172.24.4.85:6443: connect: connection refused" Oct 2 20:23:23.311467 systemd[1]: Created slice kubepods-burstable-pod0dfa1f15bab5955efb38efb9dea49cfc.slice. Oct 2 20:23:23.325198 systemd[1]: Created slice kubepods-burstable-podebbc8e1f2e0303b48c8f2bbbcf17a35a.slice. Oct 2 20:23:23.360432 kubelet[1594]: I1002 20:23:23.360372 1594 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:23.361143 kubelet[1594]: E1002 20:23:23.361114 1594 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.85:6443/api/v1/nodes\": dial tcp 172.24.4.85:6443: connect: connection refused" node="ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:23.362813 kubelet[1594]: I1002 20:23:23.362785 1594 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8531b9597ae9560e0a1c626c8ea2c3a0-kubeconfig\") pod \"kube-scheduler-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"8531b9597ae9560e0a1c626c8ea2c3a0\") " pod="kube-system/kube-scheduler-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:23.363199 kubelet[1594]: I1002 20:23:23.363147 1594 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/0dfa1f15bab5955efb38efb9dea49cfc-ca-certs\") pod \"kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"0dfa1f15bab5955efb38efb9dea49cfc\") " pod="kube-system/kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:23.363551 kubelet[1594]: I1002 20:23:23.363505 1594 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/ebbc8e1f2e0303b48c8f2bbbcf17a35a-ca-certs\") pod \"kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"ebbc8e1f2e0303b48c8f2bbbcf17a35a\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:23.363926 kubelet[1594]: I1002 20:23:23.363852 1594 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/ebbc8e1f2e0303b48c8f2bbbcf17a35a-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"ebbc8e1f2e0303b48c8f2bbbcf17a35a\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:23.364269 kubelet[1594]: I1002 20:23:23.364223 1594 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/ebbc8e1f2e0303b48c8f2bbbcf17a35a-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"ebbc8e1f2e0303b48c8f2bbbcf17a35a\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:23.364612 kubelet[1594]: I1002 20:23:23.364587 1594 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/0dfa1f15bab5955efb38efb9dea49cfc-k8s-certs\") pod \"kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"0dfa1f15bab5955efb38efb9dea49cfc\") " pod="kube-system/kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:23.364934 kubelet[1594]: I1002 20:23:23.364910 1594 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/0dfa1f15bab5955efb38efb9dea49cfc-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"0dfa1f15bab5955efb38efb9dea49cfc\") " pod="kube-system/kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:23.365237 kubelet[1594]: I1002 20:23:23.365214 1594 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/ebbc8e1f2e0303b48c8f2bbbcf17a35a-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"ebbc8e1f2e0303b48c8f2bbbcf17a35a\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:23.365633 kubelet[1594]: I1002 20:23:23.365574 1594 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/ebbc8e1f2e0303b48c8f2bbbcf17a35a-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"ebbc8e1f2e0303b48c8f2bbbcf17a35a\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:23.425685 kubelet[1594]: E1002 20:23:23.425486 1594 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510-3-0-7-ba0a608fa7.novalocal.178a6409d480568f", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510-3-0-7-ba0a608fa7.novalocal", UID:"ci-3510-3-0-7-ba0a608fa7.novalocal", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510-3-0-7-ba0a608fa7.novalocal"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 23, 23, 41076879, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 23, 23, 41076879, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.24.4.85:6443/api/v1/namespaces/default/events": dial tcp 172.24.4.85:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:23:23.609058 env[1045]: time="2023-10-02T20:23:23.608869981Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-0-7-ba0a608fa7.novalocal,Uid:8531b9597ae9560e0a1c626c8ea2c3a0,Namespace:kube-system,Attempt:0,}" Oct 2 20:23:23.621356 env[1045]: time="2023-10-02T20:23:23.621022476Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal,Uid:0dfa1f15bab5955efb38efb9dea49cfc,Namespace:kube-system,Attempt:0,}" Oct 2 20:23:23.632448 env[1045]: time="2023-10-02T20:23:23.632380104Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal,Uid:ebbc8e1f2e0303b48c8f2bbbcf17a35a,Namespace:kube-system,Attempt:0,}" Oct 2 20:23:23.661889 kubelet[1594]: E1002 20:23:23.661804 1594 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://172.24.4.85:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-7-ba0a608fa7.novalocal?timeout=10s": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:23.764438 kubelet[1594]: I1002 20:23:23.764384 1594 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:23.765079 kubelet[1594]: E1002 20:23:23.765028 1594 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.85:6443/api/v1/nodes\": dial tcp 172.24.4.85:6443: connect: connection refused" node="ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:24.079937 kubelet[1594]: W1002 20:23:24.079801 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.24.4.85:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:24.079937 kubelet[1594]: E1002 20:23:24.079889 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.85:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:24.113071 kubelet[1594]: W1002 20:23:24.112980 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.24.4.85:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:24.113071 kubelet[1594]: E1002 20:23:24.113071 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.85:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:24.136522 kubelet[1594]: W1002 20:23:24.136431 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.24.4.85:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:24.136522 kubelet[1594]: E1002 20:23:24.136507 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.85:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:24.274170 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount436957899.mount: Deactivated successfully. Oct 2 20:23:24.303694 env[1045]: time="2023-10-02T20:23:24.303570267Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:24.312904 env[1045]: time="2023-10-02T20:23:24.312803979Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:24.319247 env[1045]: time="2023-10-02T20:23:24.319157749Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:24.322610 env[1045]: time="2023-10-02T20:23:24.322518937Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:24.334851 env[1045]: time="2023-10-02T20:23:24.334678783Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:24.338384 env[1045]: time="2023-10-02T20:23:24.338329143Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:24.342438 env[1045]: time="2023-10-02T20:23:24.342356403Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:24.347213 env[1045]: time="2023-10-02T20:23:24.347112200Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:24.350728 env[1045]: time="2023-10-02T20:23:24.350667585Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:24.354540 env[1045]: time="2023-10-02T20:23:24.354483196Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:24.358519 env[1045]: time="2023-10-02T20:23:24.358447344Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:24.362076 env[1045]: time="2023-10-02T20:23:24.361989484Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:24.427623 kubelet[1594]: W1002 20:23:24.427539 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.24.4.85:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-7-ba0a608fa7.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:24.428023 kubelet[1594]: E1002 20:23:24.427644 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.85:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-0-7-ba0a608fa7.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:24.428437 env[1045]: time="2023-10-02T20:23:24.428252815Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:23:24.428437 env[1045]: time="2023-10-02T20:23:24.428292111Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:23:24.428437 env[1045]: time="2023-10-02T20:23:24.428337980Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:23:24.434571 env[1045]: time="2023-10-02T20:23:24.428795238Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d6cd81796a7f0af46dcd9d3641d617f6cab265e081a3a7f9ebb961cdcce04e97 pid=1669 runtime=io.containerd.runc.v2 Oct 2 20:23:24.442469 env[1045]: time="2023-10-02T20:23:24.442367097Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:23:24.442608 env[1045]: time="2023-10-02T20:23:24.442465758Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:23:24.442608 env[1045]: time="2023-10-02T20:23:24.442504083Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:23:24.444525 env[1045]: time="2023-10-02T20:23:24.444454050Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9774180fcaa43eb8ea8b01e2b1c6865f584f654bab5caef1ea6dd676e801a672 pid=1689 runtime=io.containerd.runc.v2 Oct 2 20:23:24.454555 systemd[1]: Started cri-containerd-d6cd81796a7f0af46dcd9d3641d617f6cab265e081a3a7f9ebb961cdcce04e97.scope. Oct 2 20:23:24.465471 kubelet[1594]: E1002 20:23:24.465410 1594 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://172.24.4.85:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-7-ba0a608fa7.novalocal?timeout=10s": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:24.468495 env[1045]: time="2023-10-02T20:23:24.466574730Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:23:24.468495 env[1045]: time="2023-10-02T20:23:24.466900884Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:23:24.468495 env[1045]: time="2023-10-02T20:23:24.467115872Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:23:24.468495 env[1045]: time="2023-10-02T20:23:24.467557078Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d7c698d081e0fed525264923f1d7c47a55c67164a2cd5651678134476122d01e pid=1715 runtime=io.containerd.runc.v2 Oct 2 20:23:24.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.484000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.484000 audit: BPF prog-id=67 op=LOAD Oct 2 20:23:24.485000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.485000 audit[1688]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1669 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.485000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436636438313739366137663061663436646364396433363431643631 Oct 2 20:23:24.485000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.485000 audit[1688]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1669 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.485000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436636438313739366137663061663436646364396433363431643631 Oct 2 20:23:24.485000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.485000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.485000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.485000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.485000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.485000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.485000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.485000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.485000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.485000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.485000 audit: BPF prog-id=68 op=LOAD Oct 2 20:23:24.485000 audit[1688]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000300c10 items=0 ppid=1669 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.485000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436636438313739366137663061663436646364396433363431643631 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit: BPF prog-id=69 op=LOAD Oct 2 20:23:24.486000 audit[1688]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000300c58 items=0 ppid=1669 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.486000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436636438313739366137663061663436646364396433363431643631 Oct 2 20:23:24.486000 audit: BPF prog-id=69 op=UNLOAD Oct 2 20:23:24.486000 audit: BPF prog-id=68 op=UNLOAD Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { perfmon } for pid=1688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit[1688]: AVC avc: denied { bpf } for pid=1688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.486000 audit: BPF prog-id=70 op=LOAD Oct 2 20:23:24.486000 audit[1688]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000301068 items=0 ppid=1669 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.486000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436636438313739366137663061663436646364396433363431643631 Oct 2 20:23:24.496768 systemd[1]: Started cri-containerd-9774180fcaa43eb8ea8b01e2b1c6865f584f654bab5caef1ea6dd676e801a672.scope. Oct 2 20:23:24.510246 systemd[1]: Started cri-containerd-d7c698d081e0fed525264923f1d7c47a55c67164a2cd5651678134476122d01e.scope. Oct 2 20:23:24.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.518000 audit: BPF prog-id=71 op=LOAD Oct 2 20:23:24.519000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.519000 audit[1714]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1689 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.519000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937373431383066636161343365623865613862303165326231633638 Oct 2 20:23:24.521000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.521000 audit[1714]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1689 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937373431383066636161343365623865613862303165326231633638 Oct 2 20:23:24.521000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.521000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.521000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.521000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.521000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.521000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.521000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.521000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.521000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.521000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.521000 audit: BPF prog-id=72 op=LOAD Oct 2 20:23:24.521000 audit[1714]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024540 items=0 ppid=1689 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.521000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937373431383066636161343365623865613862303165326231633638 Oct 2 20:23:24.522000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.522000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.522000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.522000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.522000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.522000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.522000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.522000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.522000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.522000 audit: BPF prog-id=73 op=LOAD Oct 2 20:23:24.522000 audit[1714]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024588 items=0 ppid=1689 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937373431383066636161343365623865613862303165326231633638 Oct 2 20:23:24.526000 audit: BPF prog-id=73 op=UNLOAD Oct 2 20:23:24.526000 audit: BPF prog-id=72 op=UNLOAD Oct 2 20:23:24.526000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.526000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.526000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.526000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.526000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.526000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.526000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.526000 audit[1714]: AVC avc: denied { perfmon } for pid=1714 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.526000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.526000 audit[1714]: AVC avc: denied { bpf } for pid=1714 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.526000 audit: BPF prog-id=74 op=LOAD Oct 2 20:23:24.526000 audit[1714]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000024998 items=0 ppid=1689 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937373431383066636161343365623865613862303165326231633638 Oct 2 20:23:24.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.534000 audit: BPF prog-id=75 op=LOAD Oct 2 20:23:24.534000 audit[1733]: AVC avc: denied { bpf } for pid=1733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.534000 audit[1733]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1715 pid=1733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437633639386430383165306665643532353236343932336631643763 Oct 2 20:23:24.535000 audit[1733]: AVC avc: denied { perfmon } for pid=1733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.535000 audit[1733]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1715 pid=1733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437633639386430383165306665643532353236343932336631643763 Oct 2 20:23:24.535000 audit[1733]: AVC avc: denied { bpf } for pid=1733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.535000 audit[1733]: AVC avc: denied { bpf } for pid=1733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.535000 audit[1733]: AVC avc: denied { bpf } for pid=1733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.535000 audit[1733]: AVC avc: denied { perfmon } for pid=1733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.535000 audit[1733]: AVC avc: denied { perfmon } for pid=1733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.535000 audit[1733]: AVC avc: denied { perfmon } for pid=1733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.535000 audit[1733]: AVC avc: denied { perfmon } for pid=1733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.535000 audit[1733]: AVC avc: denied { perfmon } for pid=1733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.535000 audit[1733]: AVC avc: denied { bpf } for pid=1733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.535000 audit[1733]: AVC avc: denied { bpf } for pid=1733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.535000 audit: BPF prog-id=76 op=LOAD Oct 2 20:23:24.535000 audit[1733]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000287630 items=0 ppid=1715 pid=1733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437633639386430383165306665643532353236343932336631643763 Oct 2 20:23:24.536000 audit[1733]: AVC avc: denied { bpf } for pid=1733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.536000 audit[1733]: AVC avc: denied { bpf } for pid=1733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.536000 audit[1733]: AVC avc: denied { perfmon } for pid=1733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.536000 audit[1733]: AVC avc: denied { perfmon } for pid=1733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.536000 audit[1733]: AVC avc: denied { perfmon } for pid=1733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.536000 audit[1733]: AVC avc: denied { perfmon } for pid=1733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.536000 audit[1733]: AVC avc: denied { perfmon } for pid=1733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.536000 audit[1733]: AVC avc: denied { bpf } for pid=1733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.536000 audit[1733]: AVC avc: denied { bpf } for pid=1733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.536000 audit: BPF prog-id=77 op=LOAD Oct 2 20:23:24.536000 audit[1733]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000287678 items=0 ppid=1715 pid=1733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437633639386430383165306665643532353236343932336631643763 Oct 2 20:23:24.540000 audit: BPF prog-id=77 op=UNLOAD Oct 2 20:23:24.540000 audit: BPF prog-id=76 op=UNLOAD Oct 2 20:23:24.540000 audit[1733]: AVC avc: denied { bpf } for pid=1733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.540000 audit[1733]: AVC avc: denied { bpf } for pid=1733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.540000 audit[1733]: AVC avc: denied { bpf } for pid=1733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.540000 audit[1733]: AVC avc: denied { perfmon } for pid=1733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.540000 audit[1733]: AVC avc: denied { perfmon } for pid=1733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.540000 audit[1733]: AVC avc: denied { perfmon } for pid=1733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.540000 audit[1733]: AVC avc: denied { perfmon } for pid=1733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.540000 audit[1733]: AVC avc: denied { perfmon } for pid=1733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.540000 audit[1733]: AVC avc: denied { bpf } for pid=1733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.540000 audit[1733]: AVC avc: denied { bpf } for pid=1733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.540000 audit: BPF prog-id=78 op=LOAD Oct 2 20:23:24.540000 audit[1733]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000287a88 items=0 ppid=1715 pid=1733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.540000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437633639386430383165306665643532353236343932336631643763 Oct 2 20:23:24.566913 kubelet[1594]: I1002 20:23:24.566531 1594 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:24.566913 kubelet[1594]: E1002 20:23:24.566882 1594 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.85:6443/api/v1/nodes\": dial tcp 172.24.4.85:6443: connect: connection refused" node="ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:24.593916 env[1045]: time="2023-10-02T20:23:24.593764459Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal,Uid:ebbc8e1f2e0303b48c8f2bbbcf17a35a,Namespace:kube-system,Attempt:0,} returns sandbox id \"d6cd81796a7f0af46dcd9d3641d617f6cab265e081a3a7f9ebb961cdcce04e97\"" Oct 2 20:23:24.602924 env[1045]: time="2023-10-02T20:23:24.602871174Z" level=info msg="CreateContainer within sandbox \"d6cd81796a7f0af46dcd9d3641d617f6cab265e081a3a7f9ebb961cdcce04e97\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 20:23:24.607236 env[1045]: time="2023-10-02T20:23:24.607193088Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal,Uid:0dfa1f15bab5955efb38efb9dea49cfc,Namespace:kube-system,Attempt:0,} returns sandbox id \"9774180fcaa43eb8ea8b01e2b1c6865f584f654bab5caef1ea6dd676e801a672\"" Oct 2 20:23:24.610587 env[1045]: time="2023-10-02T20:23:24.610553294Z" level=info msg="CreateContainer within sandbox \"9774180fcaa43eb8ea8b01e2b1c6865f584f654bab5caef1ea6dd676e801a672\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 20:23:24.616038 env[1045]: time="2023-10-02T20:23:24.616008438Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-0-7-ba0a608fa7.novalocal,Uid:8531b9597ae9560e0a1c626c8ea2c3a0,Namespace:kube-system,Attempt:0,} returns sandbox id \"d7c698d081e0fed525264923f1d7c47a55c67164a2cd5651678134476122d01e\"" Oct 2 20:23:24.622427 env[1045]: time="2023-10-02T20:23:24.622366507Z" level=info msg="CreateContainer within sandbox \"d7c698d081e0fed525264923f1d7c47a55c67164a2cd5651678134476122d01e\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 20:23:24.689396 env[1045]: time="2023-10-02T20:23:24.689271724Z" level=info msg="CreateContainer within sandbox \"9774180fcaa43eb8ea8b01e2b1c6865f584f654bab5caef1ea6dd676e801a672\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"021c7ba4768610a15ed3797e67b0cd0cecabf38b509e7cfe323dc42deac9d755\"" Oct 2 20:23:24.689919 env[1045]: time="2023-10-02T20:23:24.689879135Z" level=info msg="StartContainer for \"021c7ba4768610a15ed3797e67b0cd0cecabf38b509e7cfe323dc42deac9d755\"" Oct 2 20:23:24.707227 env[1045]: time="2023-10-02T20:23:24.707160697Z" level=info msg="CreateContainer within sandbox \"d7c698d081e0fed525264923f1d7c47a55c67164a2cd5651678134476122d01e\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"c0ea584df8bc77d4d5cb4e3626652d4755ec8107c6e2fd583f540eee31d1b1a2\"" Oct 2 20:23:24.707836 env[1045]: time="2023-10-02T20:23:24.707711487Z" level=info msg="StartContainer for \"c0ea584df8bc77d4d5cb4e3626652d4755ec8107c6e2fd583f540eee31d1b1a2\"" Oct 2 20:23:24.712255 env[1045]: time="2023-10-02T20:23:24.712210895Z" level=info msg="CreateContainer within sandbox \"d6cd81796a7f0af46dcd9d3641d617f6cab265e081a3a7f9ebb961cdcce04e97\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"775d25436ff6a864663d6fa1a7034b9e99b1b902e593fd835da38c232fe3cdd3\"" Oct 2 20:23:24.712768 env[1045]: time="2023-10-02T20:23:24.712732158Z" level=info msg="StartContainer for \"775d25436ff6a864663d6fa1a7034b9e99b1b902e593fd835da38c232fe3cdd3\"" Oct 2 20:23:24.722471 systemd[1]: Started cri-containerd-021c7ba4768610a15ed3797e67b0cd0cecabf38b509e7cfe323dc42deac9d755.scope. Oct 2 20:23:24.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit: BPF prog-id=79 op=LOAD Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1689 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032316337626134373638363130613135656433373937653637623063 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1689 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032316337626134373638363130613135656433373937653637623063 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit: BPF prog-id=80 op=LOAD Oct 2 20:23:24.745000 audit[1796]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00021cfc0 items=0 ppid=1689 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032316337626134373638363130613135656433373937653637623063 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit: BPF prog-id=81 op=LOAD Oct 2 20:23:24.745000 audit[1796]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00021d008 items=0 ppid=1689 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032316337626134373638363130613135656433373937653637623063 Oct 2 20:23:24.745000 audit: BPF prog-id=81 op=UNLOAD Oct 2 20:23:24.745000 audit: BPF prog-id=80 op=UNLOAD Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.745000 audit: BPF prog-id=82 op=LOAD Oct 2 20:23:24.745000 audit[1796]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00021d418 items=0 ppid=1689 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032316337626134373638363130613135656433373937653637623063 Oct 2 20:23:24.767924 systemd[1]: Started cri-containerd-775d25436ff6a864663d6fa1a7034b9e99b1b902e593fd835da38c232fe3cdd3.scope. Oct 2 20:23:24.774018 systemd[1]: Started cri-containerd-c0ea584df8bc77d4d5cb4e3626652d4755ec8107c6e2fd583f540eee31d1b1a2.scope. Oct 2 20:23:24.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.801000 audit: BPF prog-id=83 op=LOAD Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1715 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330656135383464663862633737643464356362346533363236363532 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1715 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330656135383464663862633737643464356362346533363236363532 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit: BPF prog-id=84 op=LOAD Oct 2 20:23:24.803000 audit[1826]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003f02f0 items=0 ppid=1715 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330656135383464663862633737643464356362346533363236363532 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.803000 audit: BPF prog-id=85 op=LOAD Oct 2 20:23:24.803000 audit[1826]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003f0338 items=0 ppid=1715 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330656135383464663862633737643464356362346533363236363532 Oct 2 20:23:24.804000 audit: BPF prog-id=85 op=UNLOAD Oct 2 20:23:24.804000 audit: BPF prog-id=84 op=UNLOAD Oct 2 20:23:24.804000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.804000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.804000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.804000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.804000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.804000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.804000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.804000 audit[1826]: AVC avc: denied { perfmon } for pid=1826 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.804000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.804000 audit[1826]: AVC avc: denied { bpf } for pid=1826 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.804000 audit: BPF prog-id=86 op=LOAD Oct 2 20:23:24.804000 audit[1826]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003f0748 items=0 ppid=1715 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.804000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330656135383464663862633737643464356362346533363236363532 Oct 2 20:23:24.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit: BPF prog-id=87 op=LOAD Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { bpf } for pid=1830 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1669 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737356432353433366666366138363436363364366661316137303334 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { perfmon } for pid=1830 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1669 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737356432353433366666366138363436363364366661316137303334 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { bpf } for pid=1830 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { bpf } for pid=1830 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { bpf } for pid=1830 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { perfmon } for pid=1830 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { perfmon } for pid=1830 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { perfmon } for pid=1830 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { perfmon } for pid=1830 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { perfmon } for pid=1830 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { bpf } for pid=1830 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { bpf } for pid=1830 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit: BPF prog-id=88 op=LOAD Oct 2 20:23:24.812000 audit[1830]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003baaf0 items=0 ppid=1669 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737356432353433366666366138363436363364366661316137303334 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { bpf } for pid=1830 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { bpf } for pid=1830 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { perfmon } for pid=1830 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { perfmon } for pid=1830 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { perfmon } for pid=1830 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { perfmon } for pid=1830 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { perfmon } for pid=1830 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { bpf } for pid=1830 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { bpf } for pid=1830 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit: BPF prog-id=89 op=LOAD Oct 2 20:23:24.812000 audit[1830]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003bab38 items=0 ppid=1669 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737356432353433366666366138363436363364366661316137303334 Oct 2 20:23:24.812000 audit: BPF prog-id=89 op=UNLOAD Oct 2 20:23:24.812000 audit: BPF prog-id=88 op=UNLOAD Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { bpf } for pid=1830 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { bpf } for pid=1830 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { bpf } for pid=1830 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { perfmon } for pid=1830 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { perfmon } for pid=1830 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { perfmon } for pid=1830 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { perfmon } for pid=1830 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { perfmon } for pid=1830 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { bpf } for pid=1830 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit[1830]: AVC avc: denied { bpf } for pid=1830 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:24.812000 audit: BPF prog-id=90 op=LOAD Oct 2 20:23:24.812000 audit[1830]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003baf48 items=0 ppid=1669 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:24.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737356432353433366666366138363436363364366661316137303334 Oct 2 20:23:24.844981 env[1045]: time="2023-10-02T20:23:24.844811191Z" level=info msg="StartContainer for \"021c7ba4768610a15ed3797e67b0cd0cecabf38b509e7cfe323dc42deac9d755\" returns successfully" Oct 2 20:23:24.874138 env[1045]: time="2023-10-02T20:23:24.874065536Z" level=info msg="StartContainer for \"c0ea584df8bc77d4d5cb4e3626652d4755ec8107c6e2fd583f540eee31d1b1a2\" returns successfully" Oct 2 20:23:24.876475 env[1045]: time="2023-10-02T20:23:24.876433154Z" level=info msg="StartContainer for \"775d25436ff6a864663d6fa1a7034b9e99b1b902e593fd835da38c232fe3cdd3\" returns successfully" Oct 2 20:23:25.118389 kubelet[1594]: E1002 20:23:25.118264 1594 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.85:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:25.174474 kubelet[1594]: I1002 20:23:25.174447 1594 status_manager.go:698] "Failed to get status for pod" podUID=0dfa1f15bab5955efb38efb9dea49cfc pod="kube-system/kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal" err="Get \"https://172.24.4.85:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal\": dial tcp 172.24.4.85:6443: connect: connection refused" Oct 2 20:23:25.175017 kubelet[1594]: I1002 20:23:25.174998 1594 status_manager.go:698] "Failed to get status for pod" podUID=8531b9597ae9560e0a1c626c8ea2c3a0 pod="kube-system/kube-scheduler-ci-3510-3-0-7-ba0a608fa7.novalocal" err="Get \"https://172.24.4.85:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510-3-0-7-ba0a608fa7.novalocal\": dial tcp 172.24.4.85:6443: connect: connection refused" Oct 2 20:23:25.243699 kubelet[1594]: I1002 20:23:25.243669 1594 status_manager.go:698] "Failed to get status for pod" podUID=ebbc8e1f2e0303b48c8f2bbbcf17a35a pod="kube-system/kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal" err="Get \"https://172.24.4.85:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal\": dial tcp 172.24.4.85:6443: connect: connection refused" Oct 2 20:23:25.958000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:25.958000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000307050 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:23:25.958000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:23:25.958000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:25.958000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0011a0040 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:23:25.958000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:23:26.066462 kubelet[1594]: E1002 20:23:26.066408 1594 controller.go:146] failed to ensure lease exists, will retry in 3.2s, error: Get "https://172.24.4.85:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-0-7-ba0a608fa7.novalocal?timeout=10s": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:26.171242 kubelet[1594]: I1002 20:23:26.170584 1594 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:26.171242 kubelet[1594]: E1002 20:23:26.171205 1594 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.85:6443/api/v1/nodes\": dial tcp 172.24.4.85:6443: connect: connection refused" node="ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:26.295044 kubelet[1594]: W1002 20:23:26.294817 1594 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.24.4.85:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:26.295044 kubelet[1594]: E1002 20:23:26.294948 1594 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.85:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.85:6443: connect: connection refused Oct 2 20:23:28.752000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:28.755379 kernel: kauditd_printk_skb: 628 callbacks suppressed Oct 2 20:23:28.755502 kernel: audit: type=1400 audit(1696278208.752:715): avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:28.755000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525627 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:28.764979 kernel: audit: type=1400 audit(1696278208.755:716): avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525627 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:28.755000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c003f1a060 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:23:28.771357 kernel: audit: type=1300 audit(1696278208.755:716): arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c003f1a060 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:23:28.755000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:23:28.777337 kernel: audit: type=1327 audit(1696278208.755:716): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:23:28.752000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c003c06210 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:23:28.785335 kernel: audit: type=1300 audit(1696278208.752:715): arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c003c06210 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:23:28.752000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:23:28.759000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:28.798152 kernel: audit: type=1327 audit(1696278208.752:715): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:23:28.798267 kernel: audit: type=1400 audit(1696278208.759:717): avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:28.759000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c002913ba0 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:23:28.759000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:23:28.810558 kernel: audit: type=1300 audit(1696278208.759:717): arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c002913ba0 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:23:28.810608 kernel: audit: type=1327 audit(1696278208.759:717): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:23:28.810633 kernel: audit: type=1400 audit(1696278208.769:718): avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525633 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:28.769000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525633 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:28.769000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c003c06b10 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:23:28.769000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:23:28.776000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:28.776000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5c a1=c0028d52e0 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:23:28.776000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:23:28.776000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:28.776000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5c a1=c003f4d770 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:23:28.776000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:23:29.049797 kubelet[1594]: I1002 20:23:29.049578 1594 apiserver.go:52] "Watching apiserver" Oct 2 20:23:29.061722 kubelet[1594]: I1002 20:23:29.061658 1594 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:23:29.100503 kubelet[1594]: I1002 20:23:29.100430 1594 reconciler.go:41] "Reconciler: start to sync state" Oct 2 20:23:29.279192 kubelet[1594]: E1002 20:23:29.279126 1594 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510-3-0-7-ba0a608fa7.novalocal\" not found" node="ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:29.335382 kubelet[1594]: E1002 20:23:29.335272 1594 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "ci-3510-3-0-7-ba0a608fa7.novalocal" not found Oct 2 20:23:29.374756 kubelet[1594]: I1002 20:23:29.374715 1594 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:29.592211 kubelet[1594]: I1002 20:23:29.592055 1594 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:31.922689 systemd[1]: Reloading. Oct 2 20:23:32.033054 /usr/lib/systemd/system-generators/torcx-generator[1923]: time="2023-10-02T20:23:32Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:23:32.033086 /usr/lib/systemd/system-generators/torcx-generator[1923]: time="2023-10-02T20:23:32Z" level=info msg="torcx already run" Oct 2 20:23:32.126180 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:23:32.126200 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:23:32.152217 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:23:32.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.252000 audit: BPF prog-id=91 op=LOAD Oct 2 20:23:32.252000 audit: BPF prog-id=87 op=UNLOAD Oct 2 20:23:32.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.254000 audit: BPF prog-id=92 op=LOAD Oct 2 20:23:32.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.254000 audit: BPF prog-id=93 op=LOAD Oct 2 20:23:32.254000 audit: BPF prog-id=52 op=UNLOAD Oct 2 20:23:32.254000 audit: BPF prog-id=53 op=UNLOAD Oct 2 20:23:32.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit: BPF prog-id=94 op=LOAD Oct 2 20:23:32.257000 audit: BPF prog-id=54 op=UNLOAD Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit: BPF prog-id=95 op=LOAD Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.257000 audit: BPF prog-id=96 op=LOAD Oct 2 20:23:32.257000 audit: BPF prog-id=55 op=UNLOAD Oct 2 20:23:32.257000 audit: BPF prog-id=56 op=UNLOAD Oct 2 20:23:32.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit: BPF prog-id=97 op=LOAD Oct 2 20:23:32.266000 audit: BPF prog-id=57 op=UNLOAD Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit: BPF prog-id=98 op=LOAD Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.266000 audit: BPF prog-id=99 op=LOAD Oct 2 20:23:32.266000 audit: BPF prog-id=58 op=UNLOAD Oct 2 20:23:32.266000 audit: BPF prog-id=59 op=UNLOAD Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit: BPF prog-id=100 op=LOAD Oct 2 20:23:32.267000 audit: BPF prog-id=67 op=UNLOAD Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.267000 audit: BPF prog-id=101 op=LOAD Oct 2 20:23:32.267000 audit: BPF prog-id=75 op=UNLOAD Oct 2 20:23:32.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.269000 audit: BPF prog-id=102 op=LOAD Oct 2 20:23:32.269000 audit: BPF prog-id=79 op=UNLOAD Oct 2 20:23:32.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.269000 audit: BPF prog-id=103 op=LOAD Oct 2 20:23:32.269000 audit: BPF prog-id=71 op=UNLOAD Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit: BPF prog-id=104 op=LOAD Oct 2 20:23:32.270000 audit: BPF prog-id=60 op=UNLOAD Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.271000 audit: BPF prog-id=105 op=LOAD Oct 2 20:23:32.271000 audit: BPF prog-id=83 op=UNLOAD Oct 2 20:23:32.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.273000 audit: BPF prog-id=106 op=LOAD Oct 2 20:23:32.273000 audit: BPF prog-id=61 op=UNLOAD Oct 2 20:23:32.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.274000 audit: BPF prog-id=107 op=LOAD Oct 2 20:23:32.274000 audit: BPF prog-id=62 op=UNLOAD Oct 2 20:23:32.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.275000 audit: BPF prog-id=108 op=LOAD Oct 2 20:23:32.275000 audit: BPF prog-id=63 op=UNLOAD Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit: BPF prog-id=109 op=LOAD Oct 2 20:23:32.278000 audit: BPF prog-id=64 op=UNLOAD Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit: BPF prog-id=110 op=LOAD Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.278000 audit: BPF prog-id=111 op=LOAD Oct 2 20:23:32.278000 audit: BPF prog-id=65 op=UNLOAD Oct 2 20:23:32.278000 audit: BPF prog-id=66 op=UNLOAD Oct 2 20:23:32.302433 systemd[1]: Stopping kubelet.service... Oct 2 20:23:32.318702 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 20:23:32.319003 systemd[1]: Stopped kubelet.service. Oct 2 20:23:32.317000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:32.319287 systemd[1]: kubelet.service: Consumed 1.336s CPU time. Oct 2 20:23:32.321757 systemd[1]: Started kubelet.service. Oct 2 20:23:32.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:32.422804 kubelet[1967]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:23:32.422804 kubelet[1967]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:23:32.423188 kubelet[1967]: I1002 20:23:32.422901 1967 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:23:32.424699 kubelet[1967]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:23:32.424699 kubelet[1967]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:23:32.430655 kubelet[1967]: I1002 20:23:32.430630 1967 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 20:23:32.431091 kubelet[1967]: I1002 20:23:32.431076 1967 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:23:32.431454 kubelet[1967]: I1002 20:23:32.431440 1967 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 20:23:32.434525 kubelet[1967]: I1002 20:23:32.434508 1967 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 20:23:32.436010 kubelet[1967]: I1002 20:23:32.435985 1967 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:23:32.443587 kubelet[1967]: I1002 20:23:32.443564 1967 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:23:32.443910 kubelet[1967]: I1002 20:23:32.443900 1967 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:23:32.444032 kubelet[1967]: I1002 20:23:32.444021 1967 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 20:23:32.444190 kubelet[1967]: I1002 20:23:32.444177 1967 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:23:32.444275 kubelet[1967]: I1002 20:23:32.444264 1967 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 20:23:32.445255 kubelet[1967]: I1002 20:23:32.445242 1967 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:23:32.453871 kubelet[1967]: I1002 20:23:32.452983 1967 kubelet.go:398] "Attempting to sync node with API server" Oct 2 20:23:32.453871 kubelet[1967]: I1002 20:23:32.453265 1967 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:23:32.453871 kubelet[1967]: I1002 20:23:32.453326 1967 kubelet.go:297] "Adding apiserver pod source" Oct 2 20:23:32.453871 kubelet[1967]: I1002 20:23:32.453359 1967 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:23:32.456000 audit[1979]: USER_ACCT pid=1979 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:23:32.456000 audit[1979]: CRED_REFR pid=1979 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:23:32.457000 audit[1967]: AVC avc: denied { mac_admin } for pid=1967 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.457000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:23:32.457000 audit[1967]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000661ef0 a1=c00005d158 a2=c000661ec0 a3=25 items=0 ppid=1 pid=1967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:32.457000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:23:32.457000 audit[1967]: AVC avc: denied { mac_admin } for pid=1967 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.457000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:23:32.457000 audit[1967]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000376c80 a1=c00005d170 a2=c000661f80 a3=25 items=0 ppid=1 pid=1967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:32.457000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:23:32.461385 kubelet[1967]: I1002 20:23:32.455390 1967 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:23:32.461385 kubelet[1967]: I1002 20:23:32.455863 1967 server.go:1186] "Started kubelet" Oct 2 20:23:32.461385 kubelet[1967]: I1002 20:23:32.458662 1967 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:23:32.461385 kubelet[1967]: I1002 20:23:32.458701 1967 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:23:32.461385 kubelet[1967]: I1002 20:23:32.458721 1967 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:23:32.457548 sudo[1979]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 20:23:32.457813 sudo[1979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 20:23:32.462000 audit[1979]: USER_START pid=1979 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:23:32.468126 kubelet[1967]: I1002 20:23:32.467425 1967 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:23:32.469234 kubelet[1967]: I1002 20:23:32.468970 1967 server.go:451] "Adding debug handlers to kubelet server" Oct 2 20:23:32.472691 kubelet[1967]: I1002 20:23:32.472225 1967 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 20:23:32.472691 kubelet[1967]: I1002 20:23:32.472682 1967 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:23:32.483498 kubelet[1967]: E1002 20:23:32.483449 1967 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:23:32.483498 kubelet[1967]: E1002 20:23:32.483496 1967 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:23:32.548074 kubelet[1967]: I1002 20:23:32.545861 1967 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:23:32.578319 kubelet[1967]: I1002 20:23:32.578277 1967 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:32.612136 kubelet[1967]: I1002 20:23:32.612097 1967 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:32.612275 kubelet[1967]: I1002 20:23:32.612185 1967 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:32.616567 kubelet[1967]: I1002 20:23:32.616544 1967 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:23:32.616630 kubelet[1967]: I1002 20:23:32.616585 1967 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:23:32.616630 kubelet[1967]: I1002 20:23:32.616601 1967 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:23:32.616822 kubelet[1967]: I1002 20:23:32.616805 1967 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 20:23:32.616866 kubelet[1967]: I1002 20:23:32.616827 1967 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 20:23:32.616866 kubelet[1967]: I1002 20:23:32.616840 1967 policy_none.go:49] "None policy: Start" Oct 2 20:23:32.619846 kubelet[1967]: I1002 20:23:32.619826 1967 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:23:32.619901 kubelet[1967]: I1002 20:23:32.619852 1967 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:23:32.620130 kubelet[1967]: I1002 20:23:32.620112 1967 state_mem.go:75] "Updated machine memory state" Oct 2 20:23:32.628207 kubelet[1967]: I1002 20:23:32.628184 1967 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:23:32.628207 kubelet[1967]: I1002 20:23:32.628206 1967 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 20:23:32.628327 kubelet[1967]: I1002 20:23:32.628221 1967 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 20:23:32.628327 kubelet[1967]: E1002 20:23:32.628276 1967 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:23:32.634328 kubelet[1967]: I1002 20:23:32.634281 1967 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:23:32.633000 audit[1967]: AVC avc: denied { mac_admin } for pid=1967 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:32.633000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:23:32.633000 audit[1967]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c001571140 a1=c001692cf0 a2=c001571110 a3=25 items=0 ppid=1 pid=1967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:32.633000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:23:32.635257 kubelet[1967]: I1002 20:23:32.635060 1967 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:23:32.635257 kubelet[1967]: I1002 20:23:32.635249 1967 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:23:32.729497 kubelet[1967]: I1002 20:23:32.729437 1967 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:23:32.729709 kubelet[1967]: I1002 20:23:32.729678 1967 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:23:32.731795 kubelet[1967]: I1002 20:23:32.730995 1967 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:23:32.867928 kubelet[1967]: E1002 20:23:32.867884 1967 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510-3-0-7-ba0a608fa7.novalocal\" already exists" pod="kube-system/kube-scheduler-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:32.876158 kubelet[1967]: I1002 20:23:32.876119 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/0dfa1f15bab5955efb38efb9dea49cfc-ca-certs\") pod \"kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"0dfa1f15bab5955efb38efb9dea49cfc\") " pod="kube-system/kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:32.876382 kubelet[1967]: I1002 20:23:32.876287 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/0dfa1f15bab5955efb38efb9dea49cfc-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"0dfa1f15bab5955efb38efb9dea49cfc\") " pod="kube-system/kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:32.876480 kubelet[1967]: I1002 20:23:32.876455 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/ebbc8e1f2e0303b48c8f2bbbcf17a35a-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"ebbc8e1f2e0303b48c8f2bbbcf17a35a\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:32.876575 kubelet[1967]: I1002 20:23:32.876553 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/ebbc8e1f2e0303b48c8f2bbbcf17a35a-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"ebbc8e1f2e0303b48c8f2bbbcf17a35a\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:32.876653 kubelet[1967]: I1002 20:23:32.876633 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/0dfa1f15bab5955efb38efb9dea49cfc-k8s-certs\") pod \"kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"0dfa1f15bab5955efb38efb9dea49cfc\") " pod="kube-system/kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:32.876735 kubelet[1967]: I1002 20:23:32.876705 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/ebbc8e1f2e0303b48c8f2bbbcf17a35a-ca-certs\") pod \"kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"ebbc8e1f2e0303b48c8f2bbbcf17a35a\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:32.876820 kubelet[1967]: I1002 20:23:32.876792 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/ebbc8e1f2e0303b48c8f2bbbcf17a35a-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"ebbc8e1f2e0303b48c8f2bbbcf17a35a\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:32.876900 kubelet[1967]: I1002 20:23:32.876868 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/ebbc8e1f2e0303b48c8f2bbbcf17a35a-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"ebbc8e1f2e0303b48c8f2bbbcf17a35a\") " pod="kube-system/kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:32.876978 kubelet[1967]: I1002 20:23:32.876957 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8531b9597ae9560e0a1c626c8ea2c3a0-kubeconfig\") pod \"kube-scheduler-ci-3510-3-0-7-ba0a608fa7.novalocal\" (UID: \"8531b9597ae9560e0a1c626c8ea2c3a0\") " pod="kube-system/kube-scheduler-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:33.239650 sudo[1979]: pam_unix(sudo:session): session closed for user root Oct 2 20:23:33.239000 audit[1979]: USER_END pid=1979 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:23:33.240000 audit[1979]: CRED_DISP pid=1979 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:23:33.482919 kubelet[1967]: I1002 20:23:33.482843 1967 apiserver.go:52] "Watching apiserver" Oct 2 20:23:33.573362 kubelet[1967]: I1002 20:23:33.573284 1967 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:23:33.580528 kubelet[1967]: I1002 20:23:33.580505 1967 reconciler.go:41] "Reconciler: start to sync state" Oct 2 20:23:33.862184 kubelet[1967]: E1002 20:23:33.862038 1967 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510-3-0-7-ba0a608fa7.novalocal\" already exists" pod="kube-system/kube-scheduler-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:34.062789 kubelet[1967]: E1002 20:23:34.062746 1967 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal\" already exists" pod="kube-system/kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:34.262085 kubelet[1967]: E1002 20:23:34.261949 1967 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal\" already exists" pod="kube-system/kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal" Oct 2 20:23:34.473471 kubelet[1967]: I1002 20:23:34.473436 1967 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510-3-0-7-ba0a608fa7.novalocal" podStartSLOduration=2.472635495 pod.CreationTimestamp="2023-10-02 20:23:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:23:34.470699202 +0000 UTC m=+2.139653736" watchObservedRunningTime="2023-10-02 20:23:34.472635495 +0000 UTC m=+2.141589999" Oct 2 20:23:35.280177 kubelet[1967]: I1002 20:23:35.280109 1967 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510-3-0-7-ba0a608fa7.novalocal" podStartSLOduration=3.280027451 pod.CreationTimestamp="2023-10-02 20:23:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:23:35.279909103 +0000 UTC m=+2.948863627" watchObservedRunningTime="2023-10-02 20:23:35.280027451 +0000 UTC m=+2.948981975" Oct 2 20:23:35.281001 kubelet[1967]: I1002 20:23:35.280480 1967 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510-3-0-7-ba0a608fa7.novalocal" podStartSLOduration=3.280421408 pod.CreationTimestamp="2023-10-02 20:23:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:23:34.868640229 +0000 UTC m=+2.537594754" watchObservedRunningTime="2023-10-02 20:23:35.280421408 +0000 UTC m=+2.949375962" Oct 2 20:23:35.290471 sudo[1187]: pam_unix(sudo:session): session closed for user root Oct 2 20:23:35.290000 audit[1187]: USER_END pid=1187 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:23:35.293245 kernel: kauditd_printk_skb: 271 callbacks suppressed Oct 2 20:23:35.293318 kernel: audit: type=1106 audit(1696278215.290:975): pid=1187 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:23:35.292000 audit[1187]: CRED_DISP pid=1187 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:23:35.311339 kernel: audit: type=1104 audit(1696278215.292:976): pid=1187 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:23:35.521964 sshd[1183]: pam_unix(sshd:session): session closed for user core Oct 2 20:23:35.523000 audit[1183]: USER_END pid=1183 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:23:35.537363 kernel: audit: type=1106 audit(1696278215.523:977): pid=1183 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:23:35.525000 audit[1183]: CRED_DISP pid=1183 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:23:35.538381 systemd[1]: sshd@6-172.24.4.85:22-172.24.4.1:52824.service: Deactivated successfully. Oct 2 20:23:35.539921 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 20:23:35.540228 systemd[1]: session-7.scope: Consumed 6.222s CPU time. Oct 2 20:23:35.543735 systemd-logind[1040]: Session 7 logged out. Waiting for processes to exit. Oct 2 20:23:35.546338 systemd-logind[1040]: Removed session 7. Oct 2 20:23:35.538000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.85:22-172.24.4.1:52824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:35.558204 kernel: audit: type=1104 audit(1696278215.525:978): pid=1183 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:23:35.558374 kernel: audit: type=1131 audit(1696278215.538:979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.85:22-172.24.4.1:52824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:23:43.680000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:23:43.680000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e3dd00 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:23:43.692857 kernel: audit: type=1400 audit(1696278223.680:980): avc: denied { watch } for pid=1848 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=525658 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:23:43.692973 kernel: audit: type=1300 audit(1696278223.680:980): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e3dd00 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:23:43.680000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:23:43.699340 kernel: audit: type=1327 audit(1696278223.680:980): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:23:44.010000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:44.016318 kernel: audit: type=1400 audit(1696278224.010:981): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:44.010000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0014ae140 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:23:44.010000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:23:44.027244 kernel: audit: type=1300 audit(1696278224.010:981): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0014ae140 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:23:44.027331 kernel: audit: type=1327 audit(1696278224.010:981): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:23:44.027360 kernel: audit: type=1400 audit(1696278224.010:982): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:44.010000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:44.010000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0014ae180 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:23:44.037080 kernel: audit: type=1300 audit(1696278224.010:982): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0014ae180 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:23:44.010000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:23:44.011000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:44.053071 kernel: audit: type=1327 audit(1696278224.010:982): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:23:44.053232 kernel: audit: type=1400 audit(1696278224.011:983): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:44.011000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0014ae3c0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:23:44.011000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:23:44.012000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:23:44.012000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001441840 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:23:44.012000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:23:44.379717 kubelet[1967]: I1002 20:23:44.379675 1967 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 20:23:44.381726 env[1045]: time="2023-10-02T20:23:44.381570139Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 20:23:44.382344 kubelet[1967]: I1002 20:23:44.382173 1967 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 20:23:45.142394 kubelet[1967]: I1002 20:23:45.142347 1967 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:23:45.148627 systemd[1]: Created slice kubepods-besteffort-pod0779edf2_9d8b_4ee2_8c04_9fa344ef4fa6.slice. Oct 2 20:23:45.158244 kubelet[1967]: W1002 20:23:45.158207 1967 reflector.go:424] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ci-3510-3-0-7-ba0a608fa7.novalocal" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510-3-0-7-ba0a608fa7.novalocal' and this object Oct 2 20:23:45.158657 kubelet[1967]: E1002 20:23:45.158610 1967 reflector.go:140] object-"kube-system"/"kube-proxy": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ci-3510-3-0-7-ba0a608fa7.novalocal" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510-3-0-7-ba0a608fa7.novalocal' and this object Oct 2 20:23:45.160191 kubelet[1967]: I1002 20:23:45.160156 1967 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:23:45.168330 kubelet[1967]: W1002 20:23:45.168264 1967 reflector.go:424] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510-3-0-7-ba0a608fa7.novalocal" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510-3-0-7-ba0a608fa7.novalocal' and this object Oct 2 20:23:45.168854 kubelet[1967]: E1002 20:23:45.168821 1967 reflector.go:140] object-"kube-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510-3-0-7-ba0a608fa7.novalocal" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510-3-0-7-ba0a608fa7.novalocal' and this object Oct 2 20:23:45.169431 kubelet[1967]: I1002 20:23:45.169406 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-etc-cni-netd\") pod \"cilium-fspk5\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " pod="kube-system/cilium-fspk5" Oct 2 20:23:45.169817 kubelet[1967]: I1002 20:23:45.169792 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-host-proc-sys-net\") pod \"cilium-fspk5\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " pod="kube-system/cilium-fspk5" Oct 2 20:23:45.170601 kubelet[1967]: I1002 20:23:45.170565 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-hubble-tls\") pod \"cilium-fspk5\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " pod="kube-system/cilium-fspk5" Oct 2 20:23:45.171920 kubelet[1967]: I1002 20:23:45.171891 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-hostproc\") pod \"cilium-fspk5\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " pod="kube-system/cilium-fspk5" Oct 2 20:23:45.172782 kubelet[1967]: I1002 20:23:45.172756 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/0779edf2-9d8b-4ee2-8c04-9fa344ef4fa6-kube-proxy\") pod \"kube-proxy-nzf67\" (UID: \"0779edf2-9d8b-4ee2-8c04-9fa344ef4fa6\") " pod="kube-system/kube-proxy-nzf67" Oct 2 20:23:45.173473 kubelet[1967]: I1002 20:23:45.173448 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/0779edf2-9d8b-4ee2-8c04-9fa344ef4fa6-xtables-lock\") pod \"kube-proxy-nzf67\" (UID: \"0779edf2-9d8b-4ee2-8c04-9fa344ef4fa6\") " pod="kube-system/kube-proxy-nzf67" Oct 2 20:23:45.173972 kubelet[1967]: I1002 20:23:45.173908 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-bpf-maps\") pod \"cilium-fspk5\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " pod="kube-system/cilium-fspk5" Oct 2 20:23:45.174903 kubelet[1967]: I1002 20:23:45.174880 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-lib-modules\") pod \"cilium-fspk5\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " pod="kube-system/cilium-fspk5" Oct 2 20:23:45.175233 kubelet[1967]: I1002 20:23:45.175209 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-clustermesh-secrets\") pod \"cilium-fspk5\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " pod="kube-system/cilium-fspk5" Oct 2 20:23:45.175550 kubelet[1967]: I1002 20:23:45.175527 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-cilium-cgroup\") pod \"cilium-fspk5\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " pod="kube-system/cilium-fspk5" Oct 2 20:23:45.175818 kubelet[1967]: I1002 20:23:45.175796 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-cilium-config-path\") pod \"cilium-fspk5\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " pod="kube-system/cilium-fspk5" Oct 2 20:23:45.176096 kubelet[1967]: I1002 20:23:45.176075 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/0779edf2-9d8b-4ee2-8c04-9fa344ef4fa6-lib-modules\") pod \"kube-proxy-nzf67\" (UID: \"0779edf2-9d8b-4ee2-8c04-9fa344ef4fa6\") " pod="kube-system/kube-proxy-nzf67" Oct 2 20:23:45.176364 kubelet[1967]: I1002 20:23:45.176343 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-host-proc-sys-kernel\") pod \"cilium-fspk5\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " pod="kube-system/cilium-fspk5" Oct 2 20:23:45.176644 kubelet[1967]: I1002 20:23:45.176622 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-cilium-run\") pod \"cilium-fspk5\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " pod="kube-system/cilium-fspk5" Oct 2 20:23:45.177050 kubelet[1967]: I1002 20:23:45.176989 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-cni-path\") pod \"cilium-fspk5\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " pod="kube-system/cilium-fspk5" Oct 2 20:23:45.177436 kubelet[1967]: I1002 20:23:45.177358 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-xtables-lock\") pod \"cilium-fspk5\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " pod="kube-system/cilium-fspk5" Oct 2 20:23:45.177793 kubelet[1967]: I1002 20:23:45.177769 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l9d5k\" (UniqueName: \"kubernetes.io/projected/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-kube-api-access-l9d5k\") pod \"cilium-fspk5\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " pod="kube-system/cilium-fspk5" Oct 2 20:23:45.178697 kubelet[1967]: I1002 20:23:45.178633 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tr6kb\" (UniqueName: \"kubernetes.io/projected/0779edf2-9d8b-4ee2-8c04-9fa344ef4fa6-kube-api-access-tr6kb\") pod \"kube-proxy-nzf67\" (UID: \"0779edf2-9d8b-4ee2-8c04-9fa344ef4fa6\") " pod="kube-system/kube-proxy-nzf67" Oct 2 20:23:45.179143 systemd[1]: Created slice kubepods-burstable-pod9abc2592_e1e2_4c84_9e2e_e1401d63ca17.slice. Oct 2 20:23:45.318264 kubelet[1967]: I1002 20:23:45.318232 1967 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:23:45.323780 systemd[1]: Created slice kubepods-besteffort-poda5da83e1_31e5_451e_ac63_778e65b7a16a.slice. Oct 2 20:23:45.380171 kubelet[1967]: I1002 20:23:45.380137 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kmr56\" (UniqueName: \"kubernetes.io/projected/a5da83e1-31e5-451e-ac63-778e65b7a16a-kube-api-access-kmr56\") pod \"cilium-operator-f59cbd8c6-ngzcv\" (UID: \"a5da83e1-31e5-451e-ac63-778e65b7a16a\") " pod="kube-system/cilium-operator-f59cbd8c6-ngzcv" Oct 2 20:23:45.380521 kubelet[1967]: I1002 20:23:45.380198 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/a5da83e1-31e5-451e-ac63-778e65b7a16a-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-ngzcv\" (UID: \"a5da83e1-31e5-451e-ac63-778e65b7a16a\") " pod="kube-system/cilium-operator-f59cbd8c6-ngzcv" Oct 2 20:23:46.310666 kubelet[1967]: E1002 20:23:46.310580 1967 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Oct 2 20:23:46.310666 kubelet[1967]: E1002 20:23:46.310647 1967 projected.go:198] Error preparing data for projected volume kube-api-access-l9d5k for pod kube-system/cilium-fspk5: failed to sync configmap cache: timed out waiting for the condition Oct 2 20:23:46.311007 kubelet[1967]: E1002 20:23:46.310785 1967 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-kube-api-access-l9d5k podName:9abc2592-e1e2-4c84-9e2e-e1401d63ca17 nodeName:}" failed. No retries permitted until 2023-10-02 20:23:46.810745503 +0000 UTC m=+14.479700017 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-l9d5k" (UniqueName: "kubernetes.io/projected/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-kube-api-access-l9d5k") pod "cilium-fspk5" (UID: "9abc2592-e1e2-4c84-9e2e-e1401d63ca17") : failed to sync configmap cache: timed out waiting for the condition Oct 2 20:23:46.529272 env[1045]: time="2023-10-02T20:23:46.529116558Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-ngzcv,Uid:a5da83e1-31e5-451e-ac63-778e65b7a16a,Namespace:kube-system,Attempt:0,}" Oct 2 20:23:46.589713 env[1045]: time="2023-10-02T20:23:46.588899044Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:23:46.589713 env[1045]: time="2023-10-02T20:23:46.589214717Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:23:46.589713 env[1045]: time="2023-10-02T20:23:46.589385103Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:23:46.590753 env[1045]: time="2023-10-02T20:23:46.590614944Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843 pid=2063 runtime=io.containerd.runc.v2 Oct 2 20:23:46.646029 systemd[1]: Started cri-containerd-a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843.scope. Oct 2 20:23:46.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.660000 audit: BPF prog-id=112 op=LOAD Oct 2 20:23:46.660000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.660000 audit[2073]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2063 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:46.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132353135663065343135393163336439653761346132613262366230 Oct 2 20:23:46.660000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.660000 audit[2073]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2063 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:46.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132353135663065343135393163336439653761346132613262366230 Oct 2 20:23:46.660000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.660000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.660000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.660000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.660000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.660000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.660000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.660000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.660000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.660000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.660000 audit: BPF prog-id=113 op=LOAD Oct 2 20:23:46.660000 audit[2073]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003cad70 items=0 ppid=2063 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:46.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132353135663065343135393163336439653761346132613262366230 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit: BPF prog-id=114 op=LOAD Oct 2 20:23:46.662000 audit[2073]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003cadb8 items=0 ppid=2063 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:46.662000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132353135663065343135393163336439653761346132613262366230 Oct 2 20:23:46.662000 audit: BPF prog-id=114 op=UNLOAD Oct 2 20:23:46.662000 audit: BPF prog-id=113 op=UNLOAD Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { perfmon } for pid=2073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit[2073]: AVC avc: denied { bpf } for pid=2073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.662000 audit: BPF prog-id=115 op=LOAD Oct 2 20:23:46.662000 audit[2073]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003cb1c8 items=0 ppid=2063 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:46.662000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132353135663065343135393163336439653761346132613262366230 Oct 2 20:23:46.675334 env[1045]: time="2023-10-02T20:23:46.675211521Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-nzf67,Uid:0779edf2-9d8b-4ee2-8c04-9fa344ef4fa6,Namespace:kube-system,Attempt:0,}" Oct 2 20:23:46.708886 env[1045]: time="2023-10-02T20:23:46.708798605Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-ngzcv,Uid:a5da83e1-31e5-451e-ac63-778e65b7a16a,Namespace:kube-system,Attempt:0,} returns sandbox id \"a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843\"" Oct 2 20:23:46.713405 env[1045]: time="2023-10-02T20:23:46.713353373Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 20:23:46.718969 env[1045]: time="2023-10-02T20:23:46.718782202Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:23:46.718969 env[1045]: time="2023-10-02T20:23:46.718828901Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:23:46.718969 env[1045]: time="2023-10-02T20:23:46.718843089Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:23:46.719185 env[1045]: time="2023-10-02T20:23:46.719029925Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/76d9af56326acb136278840eb9772d9c9ee4f720a5f3959d9ce16120997f60a8 pid=2105 runtime=io.containerd.runc.v2 Oct 2 20:23:46.731384 systemd[1]: Started cri-containerd-76d9af56326acb136278840eb9772d9c9ee4f720a5f3959d9ce16120997f60a8.scope. Oct 2 20:23:46.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.747000 audit: BPF prog-id=116 op=LOAD Oct 2 20:23:46.749000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.749000 audit[2114]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2105 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:46.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736643961663536333236616362313336323738383430656239373732 Oct 2 20:23:46.749000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.749000 audit[2114]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2105 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:46.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736643961663536333236616362313336323738383430656239373732 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit: BPF prog-id=117 op=LOAD Oct 2 20:23:46.750000 audit[2114]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000024390 items=0 ppid=2105 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:46.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736643961663536333236616362313336323738383430656239373732 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.750000 audit: BPF prog-id=118 op=LOAD Oct 2 20:23:46.750000 audit[2114]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0000243d8 items=0 ppid=2105 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:46.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736643961663536333236616362313336323738383430656239373732 Oct 2 20:23:46.751000 audit: BPF prog-id=118 op=UNLOAD Oct 2 20:23:46.751000 audit: BPF prog-id=117 op=UNLOAD Oct 2 20:23:46.751000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.751000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.751000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.751000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.751000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.751000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.751000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.751000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.751000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.751000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.751000 audit: BPF prog-id=119 op=LOAD Oct 2 20:23:46.751000 audit[2114]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0000247e8 items=0 ppid=2105 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:46.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736643961663536333236616362313336323738383430656239373732 Oct 2 20:23:46.772811 env[1045]: time="2023-10-02T20:23:46.772760652Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-nzf67,Uid:0779edf2-9d8b-4ee2-8c04-9fa344ef4fa6,Namespace:kube-system,Attempt:0,} returns sandbox id \"76d9af56326acb136278840eb9772d9c9ee4f720a5f3959d9ce16120997f60a8\"" Oct 2 20:23:46.777986 env[1045]: time="2023-10-02T20:23:46.777830936Z" level=info msg="CreateContainer within sandbox \"76d9af56326acb136278840eb9772d9c9ee4f720a5f3959d9ce16120997f60a8\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 20:23:46.853210 env[1045]: time="2023-10-02T20:23:46.852989026Z" level=info msg="CreateContainer within sandbox \"76d9af56326acb136278840eb9772d9c9ee4f720a5f3959d9ce16120997f60a8\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"5f76e70195d45e0f528fc224eae2ef2cab23e9c58d36eb87dd973b51790352e8\"" Oct 2 20:23:46.859683 env[1045]: time="2023-10-02T20:23:46.859552456Z" level=info msg="StartContainer for \"5f76e70195d45e0f528fc224eae2ef2cab23e9c58d36eb87dd973b51790352e8\"" Oct 2 20:23:46.914006 systemd[1]: Started cri-containerd-5f76e70195d45e0f528fc224eae2ef2cab23e9c58d36eb87dd973b51790352e8.scope. Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { perfmon } for pid=2147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2105 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:46.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566373665373031393564343565306635323866633232346561653265 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { bpf } for pid=2147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { bpf } for pid=2147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { bpf } for pid=2147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { perfmon } for pid=2147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { perfmon } for pid=2147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { perfmon } for pid=2147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { perfmon } for pid=2147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { perfmon } for pid=2147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { bpf } for pid=2147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { bpf } for pid=2147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit: BPF prog-id=120 op=LOAD Oct 2 20:23:46.948000 audit[2147]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c0001bc590 items=0 ppid=2105 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:46.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566373665373031393564343565306635323866633232346561653265 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { bpf } for pid=2147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { bpf } for pid=2147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { perfmon } for pid=2147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { perfmon } for pid=2147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { perfmon } for pid=2147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { perfmon } for pid=2147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { perfmon } for pid=2147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { bpf } for pid=2147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit[2147]: AVC avc: denied { bpf } for pid=2147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.948000 audit: BPF prog-id=121 op=LOAD Oct 2 20:23:46.948000 audit[2147]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c0001bc5d8 items=0 ppid=2105 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:46.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566373665373031393564343565306635323866633232346561653265 Oct 2 20:23:46.949000 audit: BPF prog-id=121 op=UNLOAD Oct 2 20:23:46.949000 audit: BPF prog-id=120 op=UNLOAD Oct 2 20:23:46.949000 audit[2147]: AVC avc: denied { bpf } for pid=2147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.949000 audit[2147]: AVC avc: denied { bpf } for pid=2147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.949000 audit[2147]: AVC avc: denied { bpf } for pid=2147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.949000 audit[2147]: AVC avc: denied { perfmon } for pid=2147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.949000 audit[2147]: AVC avc: denied { perfmon } for pid=2147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.949000 audit[2147]: AVC avc: denied { perfmon } for pid=2147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.949000 audit[2147]: AVC avc: denied { perfmon } for pid=2147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.949000 audit[2147]: AVC avc: denied { perfmon } for pid=2147 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.949000 audit[2147]: AVC avc: denied { bpf } for pid=2147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.949000 audit[2147]: AVC avc: denied { bpf } for pid=2147 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:46.949000 audit: BPF prog-id=122 op=LOAD Oct 2 20:23:46.949000 audit[2147]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0001bc668 items=0 ppid=2105 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:46.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566373665373031393564343565306635323866633232346561653265 Oct 2 20:23:46.980021 env[1045]: time="2023-10-02T20:23:46.979950230Z" level=info msg="StartContainer for \"5f76e70195d45e0f528fc224eae2ef2cab23e9c58d36eb87dd973b51790352e8\" returns successfully" Oct 2 20:23:46.986464 env[1045]: time="2023-10-02T20:23:46.986422443Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-fspk5,Uid:9abc2592-e1e2-4c84-9e2e-e1401d63ca17,Namespace:kube-system,Attempt:0,}" Oct 2 20:23:47.041816 env[1045]: time="2023-10-02T20:23:47.041706644Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:23:47.042107 env[1045]: time="2023-10-02T20:23:47.042050252Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:23:47.042372 env[1045]: time="2023-10-02T20:23:47.042228462Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:23:47.045240 env[1045]: time="2023-10-02T20:23:47.042939161Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260 pid=2180 runtime=io.containerd.runc.v2 Oct 2 20:23:47.063241 systemd[1]: Started cri-containerd-51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260.scope. Oct 2 20:23:47.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.086000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.086000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.087000 audit: BPF prog-id=123 op=LOAD Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=2180 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531663334353237383766663533643561666434356333323531363330 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=c items=0 ppid=2180 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531663334353237383766663533643561666434356333323531363330 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit: BPF prog-id=124 op=LOAD Oct 2 20:23:47.088000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c00028ebf0 items=0 ppid=2180 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531663334353237383766663533643561666434356333323531363330 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit: BPF prog-id=125 op=LOAD Oct 2 20:23:47.088000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c00028ec38 items=0 ppid=2180 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531663334353237383766663533643561666434356333323531363330 Oct 2 20:23:47.088000 audit: BPF prog-id=125 op=UNLOAD Oct 2 20:23:47.088000 audit: BPF prog-id=124 op=UNLOAD Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { perfmon } for pid=2191 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit[2191]: AVC avc: denied { bpf } for pid=2191 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:47.088000 audit: BPF prog-id=126 op=LOAD Oct 2 20:23:47.088000 audit[2191]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c00028f048 items=0 ppid=2180 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531663334353237383766663533643561666434356333323531363330 Oct 2 20:23:47.108148 env[1045]: time="2023-10-02T20:23:47.108033864Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-fspk5,Uid:9abc2592-e1e2-4c84-9e2e-e1401d63ca17,Namespace:kube-system,Attempt:0,} returns sandbox id \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\"" Oct 2 20:23:47.770000 audit[2240]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.770000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc9e6cb7f0 a2=0 a3=7ffc9e6cb7dc items=0 ppid=2159 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.770000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:23:47.771000 audit[2241]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_chain pid=2241 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.771000 audit[2241]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff2d260d70 a2=0 a3=7fff2d260d5c items=0 ppid=2159 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.771000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:23:47.773000 audit[2242]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_chain pid=2242 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.773000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffaf2fa760 a2=0 a3=7fffaf2fa74c items=0 ppid=2159 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.773000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:23:47.774000 audit[2243]: NETFILTER_CFG table=mangle:62 family=10 entries=1 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:47.774000 audit[2243]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe03eae2e0 a2=0 a3=7ffe03eae2cc items=0 ppid=2159 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.774000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:23:47.775000 audit[2244]: NETFILTER_CFG table=nat:63 family=10 entries=1 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:47.775000 audit[2244]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffef8333e50 a2=0 a3=7ffef8333e3c items=0 ppid=2159 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.775000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:23:47.776000 audit[2245]: NETFILTER_CFG table=filter:64 family=10 entries=1 op=nft_register_chain pid=2245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:47.776000 audit[2245]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd3a65ed30 a2=0 a3=7ffd3a65ed1c items=0 ppid=2159 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.776000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:23:47.880000 audit[2246]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=2246 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.880000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff9d023bb0 a2=0 a3=7fff9d023b9c items=0 ppid=2159 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.880000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:23:47.887000 audit[2248]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=2248 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.887000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe13380060 a2=0 a3=7ffe1338004c items=0 ppid=2159 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.887000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 20:23:47.894000 audit[2251]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=2251 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.894000 audit[2251]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fffa72fc950 a2=0 a3=7fffa72fc93c items=0 ppid=2159 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.894000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 20:23:47.895000 audit[2252]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2252 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.895000 audit[2252]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf62d2ce0 a2=0 a3=7ffcf62d2ccc items=0 ppid=2159 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.895000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:23:47.898000 audit[2254]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2254 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.898000 audit[2254]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe5b8f7590 a2=0 a3=7ffe5b8f757c items=0 ppid=2159 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.898000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:23:47.900000 audit[2255]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.900000 audit[2255]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe7b9706d0 a2=0 a3=7ffe7b9706bc items=0 ppid=2159 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.900000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:23:47.904000 audit[2257]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2257 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.904000 audit[2257]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff8cf8ea80 a2=0 a3=7fff8cf8ea6c items=0 ppid=2159 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.904000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:23:47.909000 audit[2260]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2260 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.909000 audit[2260]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffde6f0cd0 a2=0 a3=7fffde6f0cbc items=0 ppid=2159 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.909000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 20:23:47.910000 audit[2261]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.910000 audit[2261]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffda0ad98e0 a2=0 a3=7ffda0ad98cc items=0 ppid=2159 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.910000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:23:47.913000 audit[2263]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.913000 audit[2263]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc2a67bee0 a2=0 a3=7ffc2a67becc items=0 ppid=2159 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.913000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:23:47.914000 audit[2264]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.914000 audit[2264]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff546f7830 a2=0 a3=7fff546f781c items=0 ppid=2159 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.914000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:23:47.917000 audit[2266]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2266 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.917000 audit[2266]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffc80a1bf0 a2=0 a3=7fffc80a1bdc items=0 ppid=2159 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.917000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:23:47.921000 audit[2269]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2269 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.921000 audit[2269]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeebddf400 a2=0 a3=7ffeebddf3ec items=0 ppid=2159 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.921000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:23:47.926000 audit[2272]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.926000 audit[2272]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff58d09f70 a2=0 a3=7fff58d09f5c items=0 ppid=2159 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.926000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:23:47.927000 audit[2273]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=2273 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.927000 audit[2273]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff24ab4ef0 a2=0 a3=7fff24ab4edc items=0 ppid=2159 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.927000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:23:47.931000 audit[2275]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=2275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.931000 audit[2275]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffeda98dd80 a2=0 a3=7ffeda98dd6c items=0 ppid=2159 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.931000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:23:47.936000 audit[2278]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=2278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:23:47.936000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc41fde0d0 a2=0 a3=7ffc41fde0bc items=0 ppid=2159 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:47.936000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:23:48.018000 audit[2282]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=2282 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:23:48.018000 audit[2282]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7fff56f86870 a2=0 a3=7fff56f8685c items=0 ppid=2159 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.018000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:23:48.038000 audit[2282]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=2282 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:23:48.038000 audit[2282]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7fff56f86870 a2=0 a3=7fff56f8685c items=0 ppid=2159 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.038000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:23:48.046000 audit[2286]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2286 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.046000 audit[2286]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd926b29b0 a2=0 a3=7ffd926b299c items=0 ppid=2159 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.046000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:23:48.050000 audit[2288]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.050000 audit[2288]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd0446a0b0 a2=0 a3=7ffd0446a09c items=0 ppid=2159 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.050000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 20:23:48.064000 audit[2291]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=2291 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.064000 audit[2291]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe5133b4e0 a2=0 a3=7ffe5133b4cc items=0 ppid=2159 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.064000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 20:23:48.068000 audit[2292]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2292 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.068000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd530b1360 a2=0 a3=7ffd530b134c items=0 ppid=2159 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.068000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:23:48.075000 audit[2294]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2294 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.075000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdfba36620 a2=0 a3=7ffdfba3660c items=0 ppid=2159 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.075000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:23:48.077000 audit[2295]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=2295 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.077000 audit[2295]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc76a183d0 a2=0 a3=7ffc76a183bc items=0 ppid=2159 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.077000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:23:48.080000 audit[2297]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2297 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.080000 audit[2297]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffeb1a0e4d0 a2=0 a3=7ffeb1a0e4bc items=0 ppid=2159 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.080000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 20:23:48.087000 audit[2300]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=2300 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.087000 audit[2300]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe3b448500 a2=0 a3=7ffe3b4484ec items=0 ppid=2159 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.087000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:23:48.088000 audit[2301]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=2301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.088000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd5b00de30 a2=0 a3=7ffd5b00de1c items=0 ppid=2159 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.088000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:23:48.091000 audit[2303]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2303 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.091000 audit[2303]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc56b7f9e0 a2=0 a3=7ffc56b7f9cc items=0 ppid=2159 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.091000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:23:48.092000 audit[2304]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=2304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.092000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffee01c9270 a2=0 a3=7ffee01c925c items=0 ppid=2159 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.092000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:23:48.094000 audit[2306]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=2306 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.094000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd51d9ea10 a2=0 a3=7ffd51d9e9fc items=0 ppid=2159 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.094000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:23:48.100000 audit[2309]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=2309 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.100000 audit[2309]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd42aa31f0 a2=0 a3=7ffd42aa31dc items=0 ppid=2159 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.100000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:23:48.105000 audit[2312]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2312 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.105000 audit[2312]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc634747a0 a2=0 a3=7ffc6347478c items=0 ppid=2159 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.105000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 20:23:48.107000 audit[2313]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=2313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.107000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdd08ca3d0 a2=0 a3=7ffdd08ca3bc items=0 ppid=2159 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.107000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:23:48.110000 audit[2315]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.110000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffeae16c180 a2=0 a3=7ffeae16c16c items=0 ppid=2159 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.110000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:23:48.116000 audit[2318]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=2318 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:23:48.116000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffe1ed483e0 a2=0 a3=7ffe1ed483cc items=0 ppid=2159 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.116000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:23:48.126000 audit[2322]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=2322 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:23:48.126000 audit[2322]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffcb5f77770 a2=0 a3=7ffcb5f7775c items=0 ppid=2159 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.126000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:23:48.126000 audit[2322]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=2322 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:23:48.126000 audit[2322]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffcb5f77770 a2=0 a3=7ffcb5f7775c items=0 ppid=2159 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:48.126000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:23:48.870560 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2641380590.mount: Deactivated successfully. Oct 2 20:23:50.500078 env[1045]: time="2023-10-02T20:23:50.499973341Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:50.504499 env[1045]: time="2023-10-02T20:23:50.504464829Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:50.509684 env[1045]: time="2023-10-02T20:23:50.509648136Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:23:50.510560 env[1045]: time="2023-10-02T20:23:50.510534340Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 20:23:50.516200 env[1045]: time="2023-10-02T20:23:50.516157497Z" level=info msg="CreateContainer within sandbox \"a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 20:23:50.516588 env[1045]: time="2023-10-02T20:23:50.516536952Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 20:23:50.541948 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4134472450.mount: Deactivated successfully. Oct 2 20:23:50.547947 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3251851390.mount: Deactivated successfully. Oct 2 20:23:50.560558 env[1045]: time="2023-10-02T20:23:50.560514715Z" level=info msg="CreateContainer within sandbox \"a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492\"" Oct 2 20:23:50.563339 env[1045]: time="2023-10-02T20:23:50.562654271Z" level=info msg="StartContainer for \"46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492\"" Oct 2 20:23:50.589226 systemd[1]: Started cri-containerd-46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492.scope. Oct 2 20:23:50.615671 kernel: kauditd_printk_skb: 351 callbacks suppressed Oct 2 20:23:50.615781 kernel: audit: type=1400 audit(1696278230.609:1089): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.624163 kernel: audit: type=1400 audit(1696278230.609:1090): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.624374 kernel: audit: type=1400 audit(1696278230.609:1091): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.624495 kernel: audit: type=1400 audit(1696278230.609:1092): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.638387 kernel: audit: type=1400 audit(1696278230.609:1093): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.654150 kernel: audit: type=1400 audit(1696278230.609:1094): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.654270 kernel: audit: type=1400 audit(1696278230.609:1095): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.654315 kernel: audit: type=1400 audit(1696278230.609:1096): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.659493 kernel: audit: type=1400 audit(1696278230.609:1097): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.663483 kernel: audit: type=1400 audit(1696278230.614:1098): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.614000 audit: BPF prog-id=127 op=LOAD Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { bpf } for pid=2331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2063 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:50.615000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436623561663163376335306665366138636130383466316439313363 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { perfmon } for pid=2331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2063 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:50.615000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436623561663163376335306665366138636130383466316439313363 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { bpf } for pid=2331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { bpf } for pid=2331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { bpf } for pid=2331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { perfmon } for pid=2331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { perfmon } for pid=2331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { perfmon } for pid=2331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { perfmon } for pid=2331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { perfmon } for pid=2331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { bpf } for pid=2331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { bpf } for pid=2331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit: BPF prog-id=128 op=LOAD Oct 2 20:23:50.615000 audit[2331]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003b28f0 items=0 ppid=2063 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:50.615000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436623561663163376335306665366138636130383466316439313363 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { bpf } for pid=2331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { bpf } for pid=2331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { perfmon } for pid=2331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { perfmon } for pid=2331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { perfmon } for pid=2331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { perfmon } for pid=2331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { perfmon } for pid=2331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { bpf } for pid=2331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { bpf } for pid=2331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit: BPF prog-id=129 op=LOAD Oct 2 20:23:50.615000 audit[2331]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003b2938 items=0 ppid=2063 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:50.615000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436623561663163376335306665366138636130383466316439313363 Oct 2 20:23:50.615000 audit: BPF prog-id=129 op=UNLOAD Oct 2 20:23:50.615000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { bpf } for pid=2331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { bpf } for pid=2331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { bpf } for pid=2331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { perfmon } for pid=2331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { perfmon } for pid=2331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { perfmon } for pid=2331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { perfmon } for pid=2331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { perfmon } for pid=2331 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { bpf } for pid=2331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit[2331]: AVC avc: denied { bpf } for pid=2331 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:23:50.615000 audit: BPF prog-id=130 op=LOAD Oct 2 20:23:50.615000 audit[2331]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003b2d48 items=0 ppid=2063 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:23:50.615000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436623561663163376335306665366138636130383466316439313363 Oct 2 20:23:50.683000 audit[2343]: AVC avc: denied { map_create } for pid=2343 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c724 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c724 tclass=bpf permissive=0 Oct 2 20:23:50.683000 audit[2343]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c00064f7d0 a2=48 a3=c00064f7c0 items=0 ppid=2063 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c724 key=(null) Oct 2 20:23:50.683000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 20:23:50.705045 env[1045]: time="2023-10-02T20:23:50.704986027Z" level=info msg="StartContainer for \"46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492\" returns successfully" Oct 2 20:23:50.744145 kubelet[1967]: I1002 20:23:50.744108 1967 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-nzf67" podStartSLOduration=5.74405228 pod.CreationTimestamp="2023-10-02 20:23:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:23:47.738260219 +0000 UTC m=+15.407214743" watchObservedRunningTime="2023-10-02 20:23:50.74405228 +0000 UTC m=+18.413006764" Oct 2 20:23:57.831090 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount861558875.mount: Deactivated successfully. Oct 2 20:24:02.449211 env[1045]: time="2023-10-02T20:24:02.448955280Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:24:02.455779 env[1045]: time="2023-10-02T20:24:02.455703839Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:24:02.461095 env[1045]: time="2023-10-02T20:24:02.461027006Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:24:02.463015 env[1045]: time="2023-10-02T20:24:02.462945054Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 20:24:02.470379 env[1045]: time="2023-10-02T20:24:02.470275407Z" level=info msg="CreateContainer within sandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:24:02.498220 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3077883558.mount: Deactivated successfully. Oct 2 20:24:02.514093 env[1045]: time="2023-10-02T20:24:02.514022982Z" level=info msg="CreateContainer within sandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b\"" Oct 2 20:24:02.514900 env[1045]: time="2023-10-02T20:24:02.514876510Z" level=info msg="StartContainer for \"33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b\"" Oct 2 20:24:02.559108 systemd[1]: Started cri-containerd-33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b.scope. Oct 2 20:24:02.572466 systemd[1]: cri-containerd-33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b.scope: Deactivated successfully. Oct 2 20:24:03.489574 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b-rootfs.mount: Deactivated successfully. Oct 2 20:24:03.602089 env[1045]: time="2023-10-02T20:24:03.601874023Z" level=info msg="shim disconnected" id=33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b Oct 2 20:24:03.602872 env[1045]: time="2023-10-02T20:24:03.602136862Z" level=warning msg="cleaning up after shim disconnected" id=33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b namespace=k8s.io Oct 2 20:24:03.602872 env[1045]: time="2023-10-02T20:24:03.602240971Z" level=info msg="cleaning up dead shim" Oct 2 20:24:03.627685 env[1045]: time="2023-10-02T20:24:03.627480663Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:24:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2393 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:24:03Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:24:03.629048 env[1045]: time="2023-10-02T20:24:03.628809694Z" level=error msg="copy shim log" error="read /proc/self/fd/55: file already closed" Oct 2 20:24:03.629575 env[1045]: time="2023-10-02T20:24:03.629434932Z" level=error msg="Failed to pipe stdout of container \"33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b\"" error="reading from a closed fifo" Oct 2 20:24:03.629841 env[1045]: time="2023-10-02T20:24:03.629441965Z" level=error msg="Failed to pipe stderr of container \"33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b\"" error="reading from a closed fifo" Oct 2 20:24:03.636871 env[1045]: time="2023-10-02T20:24:03.636700135Z" level=error msg="StartContainer for \"33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:24:03.637361 kubelet[1967]: E1002 20:24:03.637240 1967 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b" Oct 2 20:24:03.638326 kubelet[1967]: E1002 20:24:03.637530 1967 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:24:03.638326 kubelet[1967]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:24:03.638326 kubelet[1967]: rm /hostbin/cilium-mount Oct 2 20:24:03.638326 kubelet[1967]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-l9d5k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:24:03.638918 kubelet[1967]: E1002 20:24:03.637629 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:24:03.770237 env[1045]: time="2023-10-02T20:24:03.768493623Z" level=info msg="CreateContainer within sandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:24:03.800645 kubelet[1967]: I1002 20:24:03.800571 1967 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-ngzcv" podStartSLOduration=-9.223372018054321e+09 pod.CreationTimestamp="2023-10-02 20:23:45 +0000 UTC" firstStartedPulling="2023-10-02 20:23:46.710286399 +0000 UTC m=+14.379240874" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:23:50.746148293 +0000 UTC m=+18.415102777" watchObservedRunningTime="2023-10-02 20:24:03.800453895 +0000 UTC m=+31.469408409" Oct 2 20:24:03.842249 env[1045]: time="2023-10-02T20:24:03.842084069Z" level=info msg="CreateContainer within sandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498\"" Oct 2 20:24:03.847415 env[1045]: time="2023-10-02T20:24:03.845020228Z" level=info msg="StartContainer for \"c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498\"" Oct 2 20:24:03.901839 systemd[1]: Started cri-containerd-c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498.scope. Oct 2 20:24:03.930992 systemd[1]: cri-containerd-c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498.scope: Deactivated successfully. Oct 2 20:24:04.426699 env[1045]: time="2023-10-02T20:24:04.426242987Z" level=info msg="shim disconnected" id=c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498 Oct 2 20:24:04.426699 env[1045]: time="2023-10-02T20:24:04.426394423Z" level=warning msg="cleaning up after shim disconnected" id=c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498 namespace=k8s.io Oct 2 20:24:04.426699 env[1045]: time="2023-10-02T20:24:04.426419629Z" level=info msg="cleaning up dead shim" Oct 2 20:24:04.444742 env[1045]: time="2023-10-02T20:24:04.444645076Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:24:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2431 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:24:04Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:24:04.445255 env[1045]: time="2023-10-02T20:24:04.445151118Z" level=error msg="copy shim log" error="read /proc/self/fd/55: file already closed" Oct 2 20:24:04.445837 env[1045]: time="2023-10-02T20:24:04.445776238Z" level=error msg="Failed to pipe stderr of container \"c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498\"" error="reading from a closed fifo" Oct 2 20:24:04.448173 env[1045]: time="2023-10-02T20:24:04.447649234Z" level=error msg="Failed to pipe stdout of container \"c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498\"" error="reading from a closed fifo" Oct 2 20:24:04.453399 env[1045]: time="2023-10-02T20:24:04.453256329Z" level=error msg="StartContainer for \"c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:24:04.454012 kubelet[1967]: E1002 20:24:04.453980 1967 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498" Oct 2 20:24:04.454430 kubelet[1967]: E1002 20:24:04.454397 1967 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:24:04.454430 kubelet[1967]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:24:04.454430 kubelet[1967]: rm /hostbin/cilium-mount Oct 2 20:24:04.454430 kubelet[1967]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-l9d5k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:24:04.456137 kubelet[1967]: E1002 20:24:04.456069 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:24:04.489447 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498-rootfs.mount: Deactivated successfully. Oct 2 20:24:04.767789 kubelet[1967]: I1002 20:24:04.766541 1967 scope.go:115] "RemoveContainer" containerID="33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b" Oct 2 20:24:04.770349 kubelet[1967]: I1002 20:24:04.770289 1967 scope.go:115] "RemoveContainer" containerID="33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b" Oct 2 20:24:04.775690 env[1045]: time="2023-10-02T20:24:04.774204142Z" level=info msg="RemoveContainer for \"33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b\"" Oct 2 20:24:04.777549 env[1045]: time="2023-10-02T20:24:04.777480487Z" level=info msg="RemoveContainer for \"33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b\"" Oct 2 20:24:04.790861 env[1045]: time="2023-10-02T20:24:04.777662549Z" level=error msg="RemoveContainer for \"33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b\" failed" error="failed to set removing state for container \"33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b\": container is already in removing state" Oct 2 20:24:04.791028 kubelet[1967]: E1002 20:24:04.778032 1967 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b\": container is already in removing state" containerID="33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b" Oct 2 20:24:04.791028 kubelet[1967]: E1002 20:24:04.778160 1967 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b": container is already in removing state; Skipping pod "cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)" Oct 2 20:24:04.791028 kubelet[1967]: E1002 20:24:04.778812 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:24:04.878473 env[1045]: time="2023-10-02T20:24:04.878399957Z" level=info msg="RemoveContainer for \"33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b\" returns successfully" Oct 2 20:24:05.773878 kubelet[1967]: E1002 20:24:05.773774 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:24:06.712011 kubelet[1967]: W1002 20:24:06.711944 1967 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9abc2592_e1e2_4c84_9e2e_e1401d63ca17.slice/cri-containerd-33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b.scope WatchSource:0}: container "33285ea5b7d7bc70fdbedd937695d222a3cd9e65d6e93a9b98c4bcef669a624b" in namespace "k8s.io": not found Oct 2 20:24:09.822179 kubelet[1967]: W1002 20:24:09.822080 1967 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9abc2592_e1e2_4c84_9e2e_e1401d63ca17.slice/cri-containerd-c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498.scope WatchSource:0}: task c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498 not found: not found Oct 2 20:24:19.637460 env[1045]: time="2023-10-02T20:24:19.637284955Z" level=info msg="CreateContainer within sandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:24:19.674425 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3244912065.mount: Deactivated successfully. Oct 2 20:24:19.684511 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3550187099.mount: Deactivated successfully. Oct 2 20:24:19.692096 env[1045]: time="2023-10-02T20:24:19.692005810Z" level=info msg="CreateContainer within sandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99\"" Oct 2 20:24:19.696194 env[1045]: time="2023-10-02T20:24:19.696115923Z" level=info msg="StartContainer for \"9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99\"" Oct 2 20:24:19.744356 systemd[1]: Started cri-containerd-9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99.scope. Oct 2 20:24:19.761601 systemd[1]: cri-containerd-9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99.scope: Deactivated successfully. Oct 2 20:24:19.791097 env[1045]: time="2023-10-02T20:24:19.791040444Z" level=info msg="shim disconnected" id=9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99 Oct 2 20:24:19.791409 env[1045]: time="2023-10-02T20:24:19.791384069Z" level=warning msg="cleaning up after shim disconnected" id=9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99 namespace=k8s.io Oct 2 20:24:19.791500 env[1045]: time="2023-10-02T20:24:19.791481710Z" level=info msg="cleaning up dead shim" Oct 2 20:24:19.801594 env[1045]: time="2023-10-02T20:24:19.801537263Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:24:19Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2473 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:24:19Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:24:19.802051 env[1045]: time="2023-10-02T20:24:19.801989841Z" level=error msg="copy shim log" error="read /proc/self/fd/52: file already closed" Oct 2 20:24:19.803508 env[1045]: time="2023-10-02T20:24:19.803465511Z" level=error msg="Failed to pipe stdout of container \"9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99\"" error="reading from a closed fifo" Oct 2 20:24:19.803656 env[1045]: time="2023-10-02T20:24:19.803619976Z" level=error msg="Failed to pipe stderr of container \"9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99\"" error="reading from a closed fifo" Oct 2 20:24:19.812162 env[1045]: time="2023-10-02T20:24:19.812117617Z" level=error msg="StartContainer for \"9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:24:19.812642 kubelet[1967]: E1002 20:24:19.812609 1967 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99" Oct 2 20:24:19.813011 kubelet[1967]: E1002 20:24:19.812724 1967 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:24:19.813011 kubelet[1967]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:24:19.813011 kubelet[1967]: rm /hostbin/cilium-mount Oct 2 20:24:19.813011 kubelet[1967]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-l9d5k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:24:19.814834 kubelet[1967]: E1002 20:24:19.812778 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:24:19.815605 kubelet[1967]: I1002 20:24:19.815504 1967 scope.go:115] "RemoveContainer" containerID="c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498" Oct 2 20:24:19.818486 env[1045]: time="2023-10-02T20:24:19.818445513Z" level=info msg="RemoveContainer for \"c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498\"" Oct 2 20:24:19.825738 env[1045]: time="2023-10-02T20:24:19.825706497Z" level=info msg="RemoveContainer for \"c659326a459d99eca2d174a1d8150e59f6a268f5efce94262fa730c451b87498\" returns successfully" Oct 2 20:24:20.664012 systemd[1]: run-containerd-runc-k8s.io-9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99-runc.dNiotk.mount: Deactivated successfully. Oct 2 20:24:20.664291 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99-rootfs.mount: Deactivated successfully. Oct 2 20:24:20.825140 kubelet[1967]: E1002 20:24:20.825093 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:24:22.899989 kubelet[1967]: W1002 20:24:22.899863 1967 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9abc2592_e1e2_4c84_9e2e_e1401d63ca17.slice/cri-containerd-9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99.scope WatchSource:0}: task 9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99 not found: not found Oct 2 20:24:25.959000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:25.964845 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 20:24:25.965167 kernel: audit: type=1400 audit(1696278265.959:1109): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:25.959000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:25.959000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000efae40 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:24:26.001677 kernel: audit: type=1400 audit(1696278265.959:1108): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:26.001798 kernel: audit: type=1300 audit(1696278265.959:1109): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000efae40 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:24:26.001861 kernel: audit: type=1327 audit(1696278265.959:1109): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:24:25.959000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:24:25.959000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000f61a70 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:24:26.026411 kernel: audit: type=1300 audit(1696278265.959:1108): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000f61a70 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:24:26.026531 kernel: audit: type=1327 audit(1696278265.959:1108): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:24:25.959000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:24:28.759000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525627 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:28.770359 kernel: audit: type=1400 audit(1696278268.759:1110): avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525627 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:28.759000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:28.759000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00d9eb440 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:24:28.796634 kernel: audit: type=1400 audit(1696278268.759:1111): avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:28.796821 kernel: audit: type=1300 audit(1696278268.759:1111): arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00d9eb440 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:24:28.759000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:24:28.808593 kernel: audit: type=1327 audit(1696278268.759:1111): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:24:28.759000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:28.759000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00a857a40 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:24:28.759000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:24:28.759000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00a8ec9f0 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:24:28.759000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:24:28.770000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525633 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:28.770000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00a8eca80 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:24:28.770000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:24:28.775000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:28.775000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00d9eb540 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:24:28.775000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:24:28.775000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:28.775000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00a8ecba0 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:24:28.775000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:24:34.630327 kubelet[1967]: E1002 20:24:34.630254 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:24:44.012000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:44.015659 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:24:44.015757 kernel: audit: type=1400 audit(1696278284.012:1116): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:44.012000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fd5840 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:24:44.039861 kernel: audit: type=1300 audit(1696278284.012:1116): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fd5840 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:24:44.012000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:24:44.013000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:44.060809 kernel: audit: type=1327 audit(1696278284.012:1116): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:24:44.060958 kernel: audit: type=1400 audit(1696278284.013:1117): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:44.013000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fd5860 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:24:44.073597 kernel: audit: type=1300 audit(1696278284.013:1117): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fd5860 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:24:44.013000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:24:44.074494 kernel: audit: type=1327 audit(1696278284.013:1117): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:24:44.013000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:44.096218 kernel: audit: type=1400 audit(1696278284.013:1118): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:44.096363 kernel: audit: type=1300 audit(1696278284.013:1118): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010a2700 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:24:44.013000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010a2700 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:24:44.013000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:24:44.120845 kernel: audit: type=1327 audit(1696278284.013:1118): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:24:44.121031 kernel: audit: type=1400 audit(1696278284.029:1119): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:44.029000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:24:44.029000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fd5980 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:24:44.029000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:24:47.633695 env[1045]: time="2023-10-02T20:24:47.633571735Z" level=info msg="CreateContainer within sandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:24:47.654536 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount561456077.mount: Deactivated successfully. Oct 2 20:24:47.668607 env[1045]: time="2023-10-02T20:24:47.668502036Z" level=info msg="CreateContainer within sandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91\"" Oct 2 20:24:47.670933 env[1045]: time="2023-10-02T20:24:47.670870428Z" level=info msg="StartContainer for \"77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91\"" Oct 2 20:24:47.700591 systemd[1]: Started cri-containerd-77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91.scope. Oct 2 20:24:47.720584 systemd[1]: cri-containerd-77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91.scope: Deactivated successfully. Oct 2 20:24:47.738792 env[1045]: time="2023-10-02T20:24:47.738745264Z" level=info msg="shim disconnected" id=77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91 Oct 2 20:24:47.739044 env[1045]: time="2023-10-02T20:24:47.739026171Z" level=warning msg="cleaning up after shim disconnected" id=77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91 namespace=k8s.io Oct 2 20:24:47.739122 env[1045]: time="2023-10-02T20:24:47.739107924Z" level=info msg="cleaning up dead shim" Oct 2 20:24:47.750683 env[1045]: time="2023-10-02T20:24:47.750602632Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:24:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2512 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:24:47Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:24:47.751128 env[1045]: time="2023-10-02T20:24:47.751043048Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 20:24:47.751438 env[1045]: time="2023-10-02T20:24:47.751394017Z" level=error msg="Failed to pipe stdout of container \"77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91\"" error="reading from a closed fifo" Oct 2 20:24:47.751518 env[1045]: time="2023-10-02T20:24:47.751409375Z" level=error msg="Failed to pipe stderr of container \"77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91\"" error="reading from a closed fifo" Oct 2 20:24:47.755473 env[1045]: time="2023-10-02T20:24:47.755379952Z" level=error msg="StartContainer for \"77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:24:47.757378 kubelet[1967]: E1002 20:24:47.755759 1967 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91" Oct 2 20:24:47.757903 kubelet[1967]: E1002 20:24:47.757860 1967 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:24:47.757903 kubelet[1967]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:24:47.757903 kubelet[1967]: rm /hostbin/cilium-mount Oct 2 20:24:47.757903 kubelet[1967]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-l9d5k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:24:47.758087 kubelet[1967]: E1002 20:24:47.757986 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:24:47.902851 kubelet[1967]: I1002 20:24:47.902710 1967 scope.go:115] "RemoveContainer" containerID="9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99" Oct 2 20:24:47.905119 kubelet[1967]: I1002 20:24:47.905075 1967 scope.go:115] "RemoveContainer" containerID="9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99" Oct 2 20:24:47.908665 env[1045]: time="2023-10-02T20:24:47.908522715Z" level=info msg="RemoveContainer for \"9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99\"" Oct 2 20:24:47.910662 env[1045]: time="2023-10-02T20:24:47.910535951Z" level=info msg="RemoveContainer for \"9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99\"" Oct 2 20:24:47.911019 env[1045]: time="2023-10-02T20:24:47.910944768Z" level=error msg="RemoveContainer for \"9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99\" failed" error="failed to set removing state for container \"9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99\": container is already in removing state" Oct 2 20:24:47.911503 kubelet[1967]: E1002 20:24:47.911463 1967 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99\": container is already in removing state" containerID="9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99" Oct 2 20:24:47.911634 kubelet[1967]: E1002 20:24:47.911529 1967 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99": container is already in removing state; Skipping pod "cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)" Oct 2 20:24:47.912140 kubelet[1967]: E1002 20:24:47.912097 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:24:47.918913 env[1045]: time="2023-10-02T20:24:47.918830147Z" level=info msg="RemoveContainer for \"9bc38528ff7c21525f5fb7ee4d8346e8456aba58aba7a809f143224b7fc07d99\" returns successfully" Oct 2 20:24:48.647952 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91-rootfs.mount: Deactivated successfully. Oct 2 20:24:50.846151 kubelet[1967]: W1002 20:24:50.846050 1967 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9abc2592_e1e2_4c84_9e2e_e1401d63ca17.slice/cri-containerd-77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91.scope WatchSource:0}: task 77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91 not found: not found Oct 2 20:24:59.630652 kubelet[1967]: E1002 20:24:59.630579 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:24:59.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.85:22-172.24.4.1:40206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:24:59.726981 systemd[1]: Started sshd@7-172.24.4.85:22-172.24.4.1:40206.service. Oct 2 20:24:59.730435 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:24:59.730706 kernel: audit: type=1130 audit(1696278299.726:1120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.85:22-172.24.4.1:40206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:25:01.068262 sshd[2528]: Accepted publickey for core from 172.24.4.1 port 40206 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:25:01.067000 audit[2528]: USER_ACCT pid=2528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:01.080427 kernel: audit: type=1101 audit(1696278301.067:1121): pid=2528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:01.079000 audit[2528]: CRED_ACQ pid=2528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:01.091669 sshd[2528]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:25:01.098203 kernel: audit: type=1103 audit(1696278301.079:1122): pid=2528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:01.099248 kernel: audit: type=1006 audit(1696278301.080:1123): pid=2528 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 20:25:01.099368 kernel: audit: type=1300 audit(1696278301.080:1123): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc42812d70 a2=3 a3=0 items=0 ppid=1 pid=2528 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:25:01.080000 audit[2528]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc42812d70 a2=3 a3=0 items=0 ppid=1 pid=2528 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:25:01.080000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:25:01.120380 kernel: audit: type=1327 audit(1696278301.080:1123): proctitle=737368643A20636F7265205B707269765D Oct 2 20:25:01.123271 systemd-logind[1040]: New session 8 of user core. Oct 2 20:25:01.128219 systemd[1]: Started session-8.scope. Oct 2 20:25:01.139000 audit[2528]: USER_START pid=2528 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:01.152677 kernel: audit: type=1105 audit(1696278301.139:1124): pid=2528 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:01.152849 kernel: audit: type=1103 audit(1696278301.151:1125): pid=2530 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:01.151000 audit[2530]: CRED_ACQ pid=2530 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:02.057789 sshd[2528]: pam_unix(sshd:session): session closed for user core Oct 2 20:25:02.059000 audit[2528]: USER_END pid=2528 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:02.059000 audit[2528]: CRED_DISP pid=2528 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:02.076036 systemd[1]: sshd@7-172.24.4.85:22-172.24.4.1:40206.service: Deactivated successfully. Oct 2 20:25:02.077640 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 20:25:02.081085 systemd-logind[1040]: Session 8 logged out. Waiting for processes to exit. Oct 2 20:25:02.084555 systemd-logind[1040]: Removed session 8. Oct 2 20:25:02.087228 kernel: audit: type=1106 audit(1696278302.059:1126): pid=2528 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:02.087476 kernel: audit: type=1104 audit(1696278302.059:1127): pid=2528 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:02.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.85:22-172.24.4.1:40206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:25:09.796507 update_engine[1041]: I1002 20:25:09.796393 1041 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 20:25:09.796507 update_engine[1041]: I1002 20:25:09.796481 1041 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 20:25:09.802380 update_engine[1041]: I1002 20:25:09.802276 1041 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 20:25:09.802872 update_engine[1041]: I1002 20:25:09.802775 1041 omaha_request_params.cc:62] Current group set to lts Oct 2 20:25:09.808319 update_engine[1041]: I1002 20:25:09.808159 1041 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 20:25:09.808319 update_engine[1041]: I1002 20:25:09.808198 1041 update_attempter.cc:638] Scheduling an action processor start. Oct 2 20:25:09.808319 update_engine[1041]: I1002 20:25:09.808235 1041 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 20:25:09.808570 update_engine[1041]: I1002 20:25:09.808398 1041 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 20:25:09.808570 update_engine[1041]: I1002 20:25:09.808544 1041 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 20:25:09.808570 update_engine[1041]: I1002 20:25:09.808557 1041 omaha_request_action.cc:269] Request: Oct 2 20:25:09.808570 update_engine[1041]: Oct 2 20:25:09.808570 update_engine[1041]: Oct 2 20:25:09.808570 update_engine[1041]: Oct 2 20:25:09.808570 update_engine[1041]: Oct 2 20:25:09.808570 update_engine[1041]: Oct 2 20:25:09.808570 update_engine[1041]: Oct 2 20:25:09.808570 update_engine[1041]: Oct 2 20:25:09.808570 update_engine[1041]: Oct 2 20:25:09.808570 update_engine[1041]: I1002 20:25:09.808566 1041 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 20:25:09.827176 update_engine[1041]: I1002 20:25:09.827112 1041 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 20:25:09.828641 update_engine[1041]: I1002 20:25:09.828569 1041 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 20:25:09.845572 locksmithd[1090]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 20:25:11.126768 update_engine[1041]: I1002 20:25:11.126717 1041 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 20:25:11.128126 update_engine[1041]: I1002 20:25:11.128032 1041 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 20:25:11.128639 update_engine[1041]: I1002 20:25:11.128585 1041 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 20:25:11.218462 update_engine[1041]: I1002 20:25:11.218386 1041 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 20:25:11.221581 update_engine[1041]: I1002 20:25:11.221524 1041 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 20:25:11.221581 update_engine[1041]: I1002 20:25:11.221570 1041 omaha_request_action.cc:619] Omaha request response: Oct 2 20:25:11.221581 update_engine[1041]: Oct 2 20:25:11.296292 update_engine[1041]: I1002 20:25:11.296231 1041 omaha_request_action.cc:409] No update. Oct 2 20:25:11.296629 update_engine[1041]: I1002 20:25:11.296600 1041 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 20:25:11.296765 update_engine[1041]: I1002 20:25:11.296742 1041 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 20:25:11.296882 update_engine[1041]: I1002 20:25:11.296860 1041 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 20:25:11.297004 update_engine[1041]: I1002 20:25:11.296983 1041 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 20:25:11.297137 update_engine[1041]: I1002 20:25:11.297116 1041 update_attempter.cc:302] Processing Done. Oct 2 20:25:11.297272 update_engine[1041]: I1002 20:25:11.297250 1041 update_attempter.cc:338] No update. Oct 2 20:25:11.297495 update_engine[1041]: I1002 20:25:11.297463 1041 update_check_scheduler.cc:74] Next update check in 45m44s Oct 2 20:25:11.298605 locksmithd[1090]: LastCheckedTime=1696278311 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 20:25:12.067536 systemd[1]: Started sshd@8-172.24.4.85:22-172.24.4.1:40954.service. Oct 2 20:25:12.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.85:22-172.24.4.1:40954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:25:12.071572 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:25:12.071695 kernel: audit: type=1130 audit(1696278312.067:1129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.85:22-172.24.4.1:40954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:25:12.631386 kubelet[1967]: E1002 20:25:12.631283 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:25:13.321000 audit[2541]: USER_ACCT pid=2541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:13.334605 sshd[2541]: Accepted publickey for core from 172.24.4.1 port 40954 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:25:13.336885 kernel: audit: type=1101 audit(1696278313.321:1130): pid=2541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:13.337019 kernel: audit: type=1103 audit(1696278313.335:1131): pid=2541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:13.335000 audit[2541]: CRED_ACQ pid=2541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:13.336577 sshd[2541]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:25:13.348518 kernel: audit: type=1006 audit(1696278313.335:1132): pid=2541 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 20:25:13.335000 audit[2541]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb2edf720 a2=3 a3=0 items=0 ppid=1 pid=2541 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:25:13.376330 systemd[1]: Started session-9.scope. Oct 2 20:25:13.379011 kernel: audit: type=1300 audit(1696278313.335:1132): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb2edf720 a2=3 a3=0 items=0 ppid=1 pid=2541 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:25:13.379129 kernel: audit: type=1327 audit(1696278313.335:1132): proctitle=737368643A20636F7265205B707269765D Oct 2 20:25:13.335000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:25:13.378422 systemd-logind[1040]: New session 9 of user core. Oct 2 20:25:13.393000 audit[2541]: USER_START pid=2541 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:13.395000 audit[2543]: CRED_ACQ pid=2543 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:13.413416 kernel: audit: type=1105 audit(1696278313.393:1133): pid=2541 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:13.413561 kernel: audit: type=1103 audit(1696278313.395:1134): pid=2543 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:14.023185 sshd[2541]: pam_unix(sshd:session): session closed for user core Oct 2 20:25:14.024000 audit[2541]: USER_END pid=2541 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:14.024000 audit[2541]: CRED_DISP pid=2541 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:14.041271 systemd[1]: sshd@8-172.24.4.85:22-172.24.4.1:40954.service: Deactivated successfully. Oct 2 20:25:14.042808 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 20:25:14.046379 systemd-logind[1040]: Session 9 logged out. Waiting for processes to exit. Oct 2 20:25:14.048500 systemd-logind[1040]: Removed session 9. Oct 2 20:25:14.050836 kernel: audit: type=1106 audit(1696278314.024:1135): pid=2541 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:14.050954 kernel: audit: type=1104 audit(1696278314.024:1136): pid=2541 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:14.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.85:22-172.24.4.1:40954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:25:24.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.85:22-172.24.4.1:56726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:25:24.035427 systemd[1]: Started sshd@9-172.24.4.85:22-172.24.4.1:56726.service. Oct 2 20:25:24.038208 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:25:24.038342 kernel: audit: type=1130 audit(1696278324.034:1138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.85:22-172.24.4.1:56726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:25:25.291000 audit[2556]: USER_ACCT pid=2556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:25.293449 sshd[2556]: Accepted publickey for core from 172.24.4.1 port 56726 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:25:25.302000 audit[2556]: CRED_ACQ pid=2556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:25.305023 sshd[2556]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:25:25.314120 kernel: audit: type=1101 audit(1696278325.291:1139): pid=2556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:25.314252 kernel: audit: type=1103 audit(1696278325.302:1140): pid=2556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:25.321422 kernel: audit: type=1006 audit(1696278325.303:1141): pid=2556 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 20:25:25.303000 audit[2556]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe57135d80 a2=3 a3=0 items=0 ppid=1 pid=2556 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:25:25.303000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:25:25.338287 kernel: audit: type=1300 audit(1696278325.303:1141): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe57135d80 a2=3 a3=0 items=0 ppid=1 pid=2556 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:25:25.338471 kernel: audit: type=1327 audit(1696278325.303:1141): proctitle=737368643A20636F7265205B707269765D Oct 2 20:25:25.340482 systemd-logind[1040]: New session 10 of user core. Oct 2 20:25:25.341281 systemd[1]: Started session-10.scope. Oct 2 20:25:25.352000 audit[2556]: USER_START pid=2556 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:25.352000 audit[2558]: CRED_ACQ pid=2558 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:25.373772 kernel: audit: type=1105 audit(1696278325.352:1142): pid=2556 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:25.373891 kernel: audit: type=1103 audit(1696278325.352:1143): pid=2558 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:25.966000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:25.966000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:25.987486 kernel: audit: type=1400 audit(1696278325.966:1144): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:25.987622 kernel: audit: type=1400 audit(1696278325.966:1145): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:25.966000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002834900 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:25:25.966000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:25:25.966000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00272c0c0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:25:25.966000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:25:26.010679 sshd[2556]: pam_unix(sshd:session): session closed for user core Oct 2 20:25:26.011000 audit[2556]: USER_END pid=2556 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:26.011000 audit[2556]: CRED_DISP pid=2556 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:26.016252 systemd-logind[1040]: Session 10 logged out. Waiting for processes to exit. Oct 2 20:25:26.016478 systemd[1]: sshd@9-172.24.4.85:22-172.24.4.1:56726.service: Deactivated successfully. Oct 2 20:25:26.017710 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 20:25:26.015000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.85:22-172.24.4.1:56726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:25:26.019880 systemd-logind[1040]: Removed session 10. Oct 2 20:25:26.630820 kubelet[1967]: E1002 20:25:26.630768 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:25:28.763000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:28.763000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0029d30a0 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:25:28.763000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:25:28.763000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:28.763000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00bd7c480 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:25:28.763000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:25:28.769000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525627 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:28.769000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00bd7c4e0 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:25:28.769000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:25:28.772000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525633 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:28.772000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00bd7c630 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:25:28.772000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:25:28.778000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:28.778000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c002a54f00 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:25:28.778000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:25:28.778000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:28.778000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00bd7c690 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:25:28.778000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:25:32.531106 kubelet[1967]: E1002 20:25:32.531055 1967 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 20:25:32.690336 kubelet[1967]: E1002 20:25:32.690231 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:25:36.019337 systemd[1]: Started sshd@10-172.24.4.85:22-172.24.4.1:52470.service. Oct 2 20:25:36.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.85:22-172.24.4.1:52470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:25:36.022494 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:25:36.022628 kernel: audit: type=1130 audit(1696278336.018:1155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.85:22-172.24.4.1:52470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:25:37.060000 audit[2570]: USER_ACCT pid=2570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:37.076269 kernel: audit: type=1101 audit(1696278337.060:1156): pid=2570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:37.076439 sshd[2570]: Accepted publickey for core from 172.24.4.1 port 52470 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:25:37.076000 audit[2570]: CRED_ACQ pid=2570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:37.078620 sshd[2570]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:25:37.090819 kernel: audit: type=1103 audit(1696278337.076:1157): pid=2570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:37.103198 kernel: audit: type=1006 audit(1696278337.076:1158): pid=2570 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 20:25:37.103398 kernel: audit: type=1300 audit(1696278337.076:1158): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb926b340 a2=3 a3=0 items=0 ppid=1 pid=2570 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:25:37.076000 audit[2570]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb926b340 a2=3 a3=0 items=0 ppid=1 pid=2570 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:25:37.107275 systemd[1]: Started session-11.scope. Oct 2 20:25:37.111565 systemd-logind[1040]: New session 11 of user core. Oct 2 20:25:37.117550 kernel: audit: type=1327 audit(1696278337.076:1158): proctitle=737368643A20636F7265205B707269765D Oct 2 20:25:37.076000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:25:37.129000 audit[2570]: USER_START pid=2570 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:37.144498 kernel: audit: type=1105 audit(1696278337.129:1159): pid=2570 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:37.144620 kernel: audit: type=1103 audit(1696278337.142:1160): pid=2572 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:37.142000 audit[2572]: CRED_ACQ pid=2572 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:37.692236 kubelet[1967]: E1002 20:25:37.692155 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:25:37.744822 sshd[2570]: pam_unix(sshd:session): session closed for user core Oct 2 20:25:37.745000 audit[2570]: USER_END pid=2570 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:37.750432 systemd[1]: sshd@10-172.24.4.85:22-172.24.4.1:52470.service: Deactivated successfully. Oct 2 20:25:37.751895 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 20:25:37.760451 kernel: audit: type=1106 audit(1696278337.745:1161): pid=2570 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:37.746000 audit[2570]: CRED_DISP pid=2570 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:37.770650 systemd-logind[1040]: Session 11 logged out. Waiting for processes to exit. Oct 2 20:25:37.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.85:22-172.24.4.1:52470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:25:37.771568 kernel: audit: type=1104 audit(1696278337.746:1162): pid=2570 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:37.772853 systemd-logind[1040]: Removed session 11. Oct 2 20:25:40.638272 env[1045]: time="2023-10-02T20:25:40.637681187Z" level=info msg="CreateContainer within sandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 20:25:40.678175 env[1045]: time="2023-10-02T20:25:40.677952979Z" level=info msg="CreateContainer within sandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f\"" Oct 2 20:25:40.683624 env[1045]: time="2023-10-02T20:25:40.683005067Z" level=info msg="StartContainer for \"75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f\"" Oct 2 20:25:40.749734 systemd[1]: Started cri-containerd-75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f.scope. Oct 2 20:25:40.759802 systemd[1]: cri-containerd-75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f.scope: Deactivated successfully. Oct 2 20:25:40.760065 systemd[1]: Stopped cri-containerd-75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f.scope. Oct 2 20:25:40.763283 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f-rootfs.mount: Deactivated successfully. Oct 2 20:25:40.774549 env[1045]: time="2023-10-02T20:25:40.774505957Z" level=info msg="shim disconnected" id=75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f Oct 2 20:25:40.774743 env[1045]: time="2023-10-02T20:25:40.774550671Z" level=warning msg="cleaning up after shim disconnected" id=75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f namespace=k8s.io Oct 2 20:25:40.774743 env[1045]: time="2023-10-02T20:25:40.774564196Z" level=info msg="cleaning up dead shim" Oct 2 20:25:40.782425 env[1045]: time="2023-10-02T20:25:40.782377984Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:25:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2605 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:25:40Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:25:40.782797 env[1045]: time="2023-10-02T20:25:40.782747683Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 20:25:40.783541 env[1045]: time="2023-10-02T20:25:40.783030067Z" level=error msg="Failed to pipe stdout of container \"75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f\"" error="reading from a closed fifo" Oct 2 20:25:40.783639 env[1045]: time="2023-10-02T20:25:40.783350562Z" level=error msg="Failed to pipe stderr of container \"75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f\"" error="reading from a closed fifo" Oct 2 20:25:40.786775 env[1045]: time="2023-10-02T20:25:40.786741471Z" level=error msg="StartContainer for \"75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:25:40.788811 kubelet[1967]: E1002 20:25:40.787055 1967 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f" Oct 2 20:25:40.788811 kubelet[1967]: E1002 20:25:40.787174 1967 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:25:40.788811 kubelet[1967]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:25:40.788811 kubelet[1967]: rm /hostbin/cilium-mount Oct 2 20:25:40.789185 kubelet[1967]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-l9d5k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:25:40.789257 kubelet[1967]: E1002 20:25:40.787234 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:25:41.120271 kubelet[1967]: I1002 20:25:41.120229 1967 scope.go:115] "RemoveContainer" containerID="77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91" Oct 2 20:25:41.121352 kubelet[1967]: I1002 20:25:41.121262 1967 scope.go:115] "RemoveContainer" containerID="77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91" Oct 2 20:25:41.129912 env[1045]: time="2023-10-02T20:25:41.129834247Z" level=info msg="RemoveContainer for \"77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91\"" Oct 2 20:25:41.132606 env[1045]: time="2023-10-02T20:25:41.130450862Z" level=info msg="RemoveContainer for \"77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91\"" Oct 2 20:25:41.132789 env[1045]: time="2023-10-02T20:25:41.132664255Z" level=error msg="RemoveContainer for \"77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91\" failed" error="failed to set removing state for container \"77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91\": container is already in removing state" Oct 2 20:25:41.133371 kubelet[1967]: E1002 20:25:41.133204 1967 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91\": container is already in removing state" containerID="77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91" Oct 2 20:25:41.133527 kubelet[1967]: I1002 20:25:41.133391 1967 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91} err="rpc error: code = Unknown desc = failed to set removing state for container \"77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91\": container is already in removing state" Oct 2 20:25:41.142068 env[1045]: time="2023-10-02T20:25:41.141999017Z" level=info msg="RemoveContainer for \"77016082585bfb0e216098cbe262825d7878428e911da910d70133d5133a3a91\" returns successfully" Oct 2 20:25:41.143537 kubelet[1967]: E1002 20:25:41.143466 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:25:42.694004 kubelet[1967]: E1002 20:25:42.693962 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:25:43.880966 kubelet[1967]: W1002 20:25:43.880910 1967 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9abc2592_e1e2_4c84_9e2e_e1401d63ca17.slice/cri-containerd-75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f.scope WatchSource:0}: task 75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f not found: not found Oct 2 20:25:44.018086 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:25:44.018439 kernel: audit: type=1400 audit(1696278344.012:1164): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:44.012000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:44.012000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0014ae260 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:25:44.040073 kernel: audit: type=1300 audit(1696278344.012:1164): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0014ae260 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:25:44.040192 kernel: audit: type=1327 audit(1696278344.012:1164): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:25:44.012000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:25:44.012000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:44.061944 kernel: audit: type=1400 audit(1696278344.012:1165): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:44.062062 kernel: audit: type=1300 audit(1696278344.012:1165): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0014ae280 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:25:44.012000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0014ae280 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:25:44.012000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:25:44.086369 kernel: audit: type=1327 audit(1696278344.012:1165): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:25:44.086505 kernel: audit: type=1400 audit(1696278344.015:1166): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:44.015000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:44.092056 kernel: audit: type=1300 audit(1696278344.015:1166): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00181a7c0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:25:44.015000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00181a7c0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:25:44.097495 kernel: audit: type=1327 audit(1696278344.015:1166): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:25:44.015000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:25:44.101968 kernel: audit: type=1400 audit(1696278344.028:1167): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:44.028000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:25:44.028000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0014ae4a0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:25:44.028000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:25:47.696442 kubelet[1967]: E1002 20:25:47.696375 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:25:47.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.85:22-172.24.4.1:39734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:25:47.755605 systemd[1]: Started sshd@11-172.24.4.85:22-172.24.4.1:39734.service. Oct 2 20:25:48.774000 audit[2619]: USER_ACCT pid=2619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:48.776529 sshd[2619]: Accepted publickey for core from 172.24.4.1 port 39734 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:25:48.777000 audit[2619]: CRED_ACQ pid=2619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:48.777000 audit[2619]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca661c3b0 a2=3 a3=0 items=0 ppid=1 pid=2619 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:25:48.777000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:25:48.780256 sshd[2619]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:25:48.791240 systemd-logind[1040]: New session 12 of user core. Oct 2 20:25:48.792193 systemd[1]: Started session-12.scope. Oct 2 20:25:48.803000 audit[2619]: USER_START pid=2619 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:48.806000 audit[2623]: CRED_ACQ pid=2623 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:49.565606 sshd[2619]: pam_unix(sshd:session): session closed for user core Oct 2 20:25:49.566000 audit[2619]: USER_END pid=2619 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:49.571510 kernel: kauditd_printk_skb: 10 callbacks suppressed Oct 2 20:25:49.571635 kernel: audit: type=1106 audit(1696278349.566:1174): pid=2619 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:49.567000 audit[2619]: CRED_DISP pid=2619 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:49.585667 systemd[1]: sshd@11-172.24.4.85:22-172.24.4.1:39734.service: Deactivated successfully. Oct 2 20:25:49.587210 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 20:25:49.595038 systemd-logind[1040]: Session 12 logged out. Waiting for processes to exit. Oct 2 20:25:49.595382 kernel: audit: type=1104 audit(1696278349.567:1175): pid=2619 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:25:49.583000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.85:22-172.24.4.1:39734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:25:49.606369 kernel: audit: type=1131 audit(1696278349.583:1176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.85:22-172.24.4.1:39734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:25:49.607069 systemd-logind[1040]: Removed session 12. Oct 2 20:25:51.630399 kubelet[1967]: E1002 20:25:51.630350 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:25:52.698703 kubelet[1967]: E1002 20:25:52.698608 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:25:57.700588 kubelet[1967]: E1002 20:25:57.700513 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:25:59.577535 systemd[1]: Started sshd@12-172.24.4.85:22-172.24.4.1:53624.service. Oct 2 20:25:59.577000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.85:22-172.24.4.1:53624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:25:59.590384 kernel: audit: type=1130 audit(1696278359.577:1177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.85:22-172.24.4.1:53624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:00.774000 audit[2635]: USER_ACCT pid=2635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:00.779026 sshd[2635]: Accepted publickey for core from 172.24.4.1 port 53624 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:26:00.789354 kernel: audit: type=1101 audit(1696278360.774:1178): pid=2635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:00.788000 audit[2635]: CRED_ACQ pid=2635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:00.790554 sshd[2635]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:26:00.802363 kernel: audit: type=1103 audit(1696278360.788:1179): pid=2635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:00.819365 kernel: audit: type=1006 audit(1696278360.788:1180): pid=2635 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 20:26:00.788000 audit[2635]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec427d130 a2=3 a3=0 items=0 ppid=1 pid=2635 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:26:00.831384 kernel: audit: type=1300 audit(1696278360.788:1180): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec427d130 a2=3 a3=0 items=0 ppid=1 pid=2635 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:26:00.788000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:26:00.838397 kernel: audit: type=1327 audit(1696278360.788:1180): proctitle=737368643A20636F7265205B707269765D Oct 2 20:26:00.843286 systemd-logind[1040]: New session 13 of user core. Oct 2 20:26:00.844266 systemd[1]: Started session-13.scope. Oct 2 20:26:00.856000 audit[2635]: USER_START pid=2635 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:00.873393 kernel: audit: type=1105 audit(1696278360.856:1181): pid=2635 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:00.873000 audit[2637]: CRED_ACQ pid=2637 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:00.887431 kernel: audit: type=1103 audit(1696278360.873:1182): pid=2637 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:01.533081 sshd[2635]: pam_unix(sshd:session): session closed for user core Oct 2 20:26:01.534000 audit[2635]: USER_END pid=2635 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:01.549343 kernel: audit: type=1106 audit(1696278361.534:1183): pid=2635 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:01.550705 systemd[1]: sshd@12-172.24.4.85:22-172.24.4.1:53624.service: Deactivated successfully. Oct 2 20:26:01.534000 audit[2635]: CRED_DISP pid=2635 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:01.552200 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 20:26:01.561405 kernel: audit: type=1104 audit(1696278361.534:1184): pid=2635 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:01.549000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.85:22-172.24.4.1:53624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:01.562749 systemd-logind[1040]: Session 13 logged out. Waiting for processes to exit. Oct 2 20:26:01.567212 systemd-logind[1040]: Removed session 13. Oct 2 20:26:02.631539 kubelet[1967]: E1002 20:26:02.631487 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:26:02.702670 kubelet[1967]: E1002 20:26:02.702596 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:26:07.704601 kubelet[1967]: E1002 20:26:07.704506 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:26:11.544001 systemd[1]: Started sshd@13-172.24.4.85:22-172.24.4.1:33730.service. Oct 2 20:26:11.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.85:22-172.24.4.1:33730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:11.550491 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:26:11.550628 kernel: audit: type=1130 audit(1696278371.544:1186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.85:22-172.24.4.1:33730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:12.621000 audit[2647]: USER_ACCT pid=2647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:12.622519 sshd[2647]: Accepted publickey for core from 172.24.4.1 port 33730 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:26:12.633377 kernel: audit: type=1101 audit(1696278372.621:1187): pid=2647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:12.634129 sshd[2647]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:26:12.632000 audit[2647]: CRED_ACQ pid=2647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:12.645349 kernel: audit: type=1103 audit(1696278372.632:1188): pid=2647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:12.652363 kernel: audit: type=1006 audit(1696278372.632:1189): pid=2647 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 20:26:12.632000 audit[2647]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb41185c0 a2=3 a3=0 items=0 ppid=1 pid=2647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:26:12.664421 kernel: audit: type=1300 audit(1696278372.632:1189): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb41185c0 a2=3 a3=0 items=0 ppid=1 pid=2647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:26:12.664641 kernel: audit: type=1327 audit(1696278372.632:1189): proctitle=737368643A20636F7265205B707269765D Oct 2 20:26:12.632000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:26:12.677819 systemd[1]: Started session-14.scope. Oct 2 20:26:12.679240 systemd-logind[1040]: New session 14 of user core. Oct 2 20:26:12.693000 audit[2647]: USER_START pid=2647 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:12.706355 kernel: audit: type=1105 audit(1696278372.693:1190): pid=2647 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:12.693000 audit[2649]: CRED_ACQ pid=2649 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:12.708794 kubelet[1967]: E1002 20:26:12.708698 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:26:12.717383 kernel: audit: type=1103 audit(1696278372.693:1191): pid=2649 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:13.444977 sshd[2647]: pam_unix(sshd:session): session closed for user core Oct 2 20:26:13.447000 audit[2647]: USER_END pid=2647 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:13.460408 kernel: audit: type=1106 audit(1696278373.447:1192): pid=2647 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:13.460588 systemd[1]: sshd@13-172.24.4.85:22-172.24.4.1:33730.service: Deactivated successfully. Oct 2 20:26:13.447000 audit[2647]: CRED_DISP pid=2647 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:13.462243 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 20:26:13.471355 kernel: audit: type=1104 audit(1696278373.447:1193): pid=2647 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:13.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.85:22-172.24.4.1:33730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:13.474707 systemd-logind[1040]: Session 14 logged out. Waiting for processes to exit. Oct 2 20:26:13.476992 systemd-logind[1040]: Removed session 14. Oct 2 20:26:14.630744 kubelet[1967]: E1002 20:26:14.630694 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:26:17.711187 kubelet[1967]: E1002 20:26:17.711126 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:26:22.713411 kubelet[1967]: E1002 20:26:22.713343 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:26:23.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.85:22-172.24.4.1:44766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:23.462762 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:26:23.462860 kernel: audit: type=1130 audit(1696278383.458:1195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.85:22-172.24.4.1:44766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:23.459056 systemd[1]: Started sshd@14-172.24.4.85:22-172.24.4.1:44766.service. Oct 2 20:26:24.670000 audit[2662]: USER_ACCT pid=2662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:24.672643 sshd[2662]: Accepted publickey for core from 172.24.4.1 port 44766 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:26:24.683364 kernel: audit: type=1101 audit(1696278384.670:1196): pid=2662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:24.682000 audit[2662]: CRED_ACQ pid=2662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:24.685197 sshd[2662]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:26:24.695784 kernel: audit: type=1103 audit(1696278384.682:1197): pid=2662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:24.703351 kernel: audit: type=1006 audit(1696278384.683:1198): pid=2662 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 20:26:24.683000 audit[2662]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd9dd4dc00 a2=3 a3=0 items=0 ppid=1 pid=2662 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:26:24.714692 systemd[1]: Started session-15.scope. Oct 2 20:26:24.718985 kernel: audit: type=1300 audit(1696278384.683:1198): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd9dd4dc00 a2=3 a3=0 items=0 ppid=1 pid=2662 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:26:24.715604 systemd-logind[1040]: New session 15 of user core. Oct 2 20:26:24.683000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:26:24.725402 kernel: audit: type=1327 audit(1696278384.683:1198): proctitle=737368643A20636F7265205B707269765D Oct 2 20:26:24.728000 audit[2662]: USER_START pid=2662 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:24.731000 audit[2664]: CRED_ACQ pid=2664 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:24.753809 kernel: audit: type=1105 audit(1696278384.728:1199): pid=2662 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:24.753940 kernel: audit: type=1103 audit(1696278384.731:1200): pid=2664 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:25.309797 sshd[2662]: pam_unix(sshd:session): session closed for user core Oct 2 20:26:25.310000 audit[2662]: USER_END pid=2662 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:25.310000 audit[2662]: CRED_DISP pid=2662 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:25.324653 systemd[1]: sshd@14-172.24.4.85:22-172.24.4.1:44766.service: Deactivated successfully. Oct 2 20:26:25.326111 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 20:26:25.329024 systemd-logind[1040]: Session 15 logged out. Waiting for processes to exit. Oct 2 20:26:25.331221 systemd-logind[1040]: Removed session 15. Oct 2 20:26:25.333746 kernel: audit: type=1106 audit(1696278385.310:1201): pid=2662 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:25.334024 kernel: audit: type=1104 audit(1696278385.310:1202): pid=2662 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:25.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.85:22-172.24.4.1:44766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:25.967000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:25.967000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00103cf00 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:26:25.967000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:26:25.967000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:25.967000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010a2100 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:26:25.967000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:26:26.629620 kubelet[1967]: E1002 20:26:26.629557 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:26:27.715363 kubelet[1967]: E1002 20:26:27.715286 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:26:28.764000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:28.768328 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 20:26:28.768456 kernel: audit: type=1400 audit(1696278388.764:1206): avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:28.764000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:28.790155 kernel: audit: type=1400 audit(1696278388.764:1207): avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:28.790374 kernel: audit: type=1300 audit(1696278388.764:1206): arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0084086c0 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:26:28.764000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0084086c0 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:26:28.764000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:26:28.814805 kernel: audit: type=1327 audit(1696278388.764:1206): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:26:28.814928 kernel: audit: type=1300 audit(1696278388.764:1207): arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c002b89440 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:26:28.764000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c002b89440 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:26:28.764000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:26:28.839524 kernel: audit: type=1327 audit(1696278388.764:1207): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:26:28.839744 kernel: audit: type=1400 audit(1696278388.770:1208): avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525627 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:28.770000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525627 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:28.847101 kernel: audit: type=1300 audit(1696278388.770:1208): arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0084088a0 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:26:28.770000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0084088a0 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:26:28.852606 kernel: audit: type=1327 audit(1696278388.770:1208): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:26:28.770000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:26:28.857941 kernel: audit: type=1400 audit(1696278388.772:1209): avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525633 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:28.772000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525633 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:28.772000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0083a7320 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:26:28.772000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:26:28.778000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:28.778000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0083a74d0 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:26:28.778000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:26:28.779000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:28.779000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c002b89520 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:26:28.779000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:26:32.717814 kubelet[1967]: E1002 20:26:32.717771 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:26:35.323487 systemd[1]: Started sshd@15-172.24.4.85:22-172.24.4.1:51370.service. Oct 2 20:26:35.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.85:22-172.24.4.1:51370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:35.327424 kernel: kauditd_printk_skb: 8 callbacks suppressed Oct 2 20:26:35.327689 kernel: audit: type=1130 audit(1696278395.323:1212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.85:22-172.24.4.1:51370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:36.434000 audit[2676]: USER_ACCT pid=2676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:36.436433 sshd[2676]: Accepted publickey for core from 172.24.4.1 port 51370 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:26:36.446000 audit[2676]: CRED_ACQ pid=2676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:36.448863 sshd[2676]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:26:36.457749 kernel: audit: type=1101 audit(1696278396.434:1213): pid=2676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:36.457910 kernel: audit: type=1103 audit(1696278396.446:1214): pid=2676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:36.466351 kernel: audit: type=1006 audit(1696278396.446:1215): pid=2676 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 20:26:36.446000 audit[2676]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffffcb396d0 a2=3 a3=0 items=0 ppid=1 pid=2676 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:26:36.446000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:26:36.483876 kernel: audit: type=1300 audit(1696278396.446:1215): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffffcb396d0 a2=3 a3=0 items=0 ppid=1 pid=2676 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:26:36.484037 kernel: audit: type=1327 audit(1696278396.446:1215): proctitle=737368643A20636F7265205B707269765D Oct 2 20:26:36.489256 systemd-logind[1040]: New session 16 of user core. Oct 2 20:26:36.494186 systemd[1]: Started session-16.scope. Oct 2 20:26:36.510000 audit[2676]: USER_START pid=2676 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:36.523000 audit[2678]: CRED_ACQ pid=2678 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:36.537744 kernel: audit: type=1105 audit(1696278396.510:1216): pid=2676 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:36.537862 kernel: audit: type=1103 audit(1696278396.523:1217): pid=2678 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:37.258283 sshd[2676]: pam_unix(sshd:session): session closed for user core Oct 2 20:26:37.259000 audit[2676]: USER_END pid=2676 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:37.259000 audit[2676]: CRED_DISP pid=2676 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:37.282391 kernel: audit: type=1106 audit(1696278397.259:1218): pid=2676 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:37.282543 kernel: audit: type=1104 audit(1696278397.259:1219): pid=2676 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:37.283036 systemd[1]: sshd@15-172.24.4.85:22-172.24.4.1:51370.service: Deactivated successfully. Oct 2 20:26:37.284572 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 20:26:37.282000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.85:22-172.24.4.1:51370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:37.286954 systemd-logind[1040]: Session 16 logged out. Waiting for processes to exit. Oct 2 20:26:37.289170 systemd-logind[1040]: Removed session 16. Oct 2 20:26:37.720544 kubelet[1967]: E1002 20:26:37.720491 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:26:38.629763 kubelet[1967]: E1002 20:26:38.629692 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:26:42.722212 kubelet[1967]: E1002 20:26:42.722164 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:26:44.021392 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:26:44.021667 kernel: audit: type=1400 audit(1696278404.014:1221): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:44.014000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:44.014000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010a3780 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:26:44.041856 kernel: audit: type=1300 audit(1696278404.014:1221): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010a3780 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:26:44.042021 kernel: audit: type=1327 audit(1696278404.014:1221): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:26:44.014000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:26:44.014000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:44.063759 kernel: audit: type=1400 audit(1696278404.014:1222): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:44.063876 kernel: audit: type=1300 audit(1696278404.014:1222): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010a37a0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:26:44.014000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010a37a0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:26:44.014000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:26:44.088509 kernel: audit: type=1327 audit(1696278404.014:1222): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:26:44.017000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:44.097939 kernel: audit: type=1400 audit(1696278404.017:1223): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:44.017000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013ca2e0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:26:44.111338 kernel: audit: type=1300 audit(1696278404.017:1223): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013ca2e0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:26:44.017000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:26:44.117464 kernel: audit: type=1327 audit(1696278404.017:1223): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:26:44.030000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:44.122397 kernel: audit: type=1400 audit(1696278404.030:1224): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:26:44.030000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010a39c0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:26:44.030000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:26:47.274546 systemd[1]: Started sshd@16-172.24.4.85:22-172.24.4.1:56006.service. Oct 2 20:26:47.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.85:22-172.24.4.1:56006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:47.724850 kubelet[1967]: E1002 20:26:47.724768 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:26:48.672000 audit[2689]: USER_ACCT pid=2689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:48.674135 sshd[2689]: Accepted publickey for core from 172.24.4.1 port 56006 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:26:48.674000 audit[2689]: CRED_ACQ pid=2689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:48.674000 audit[2689]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebe416010 a2=3 a3=0 items=0 ppid=1 pid=2689 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:26:48.674000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:26:48.677684 sshd[2689]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:26:48.687456 systemd-logind[1040]: New session 17 of user core. Oct 2 20:26:48.688785 systemd[1]: Started session-17.scope. Oct 2 20:26:48.701000 audit[2689]: USER_START pid=2689 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:48.704000 audit[2693]: CRED_ACQ pid=2693 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:49.413620 sshd[2689]: pam_unix(sshd:session): session closed for user core Oct 2 20:26:49.419387 kernel: kauditd_printk_skb: 10 callbacks suppressed Oct 2 20:26:49.419600 kernel: audit: type=1106 audit(1696278409.414:1231): pid=2689 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:49.414000 audit[2689]: USER_END pid=2689 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:49.425758 systemd[1]: Started sshd@17-172.24.4.85:22-172.24.4.1:56014.service. Oct 2 20:26:49.441344 systemd[1]: sshd@16-172.24.4.85:22-172.24.4.1:56006.service: Deactivated successfully. Oct 2 20:26:49.442891 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 20:26:49.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.85:22-172.24.4.1:56014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:49.457735 systemd-logind[1040]: Session 17 logged out. Waiting for processes to exit. Oct 2 20:26:49.458656 kernel: audit: type=1130 audit(1696278409.436:1232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.85:22-172.24.4.1:56014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:49.436000 audit[2689]: CRED_DISP pid=2689 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:49.440000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.85:22-172.24.4.1:56006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:49.477564 kernel: audit: type=1104 audit(1696278409.436:1233): pid=2689 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:49.477689 kernel: audit: type=1131 audit(1696278409.440:1234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.85:22-172.24.4.1:56006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:49.477530 systemd-logind[1040]: Removed session 17. Oct 2 20:26:50.583000 audit[2702]: USER_ACCT pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:50.584622 sshd[2702]: Accepted publickey for core from 172.24.4.1 port 56014 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:26:50.594000 audit[2702]: CRED_ACQ pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:50.597159 sshd[2702]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:26:50.606370 kernel: audit: type=1101 audit(1696278410.583:1235): pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:50.606433 kernel: audit: type=1103 audit(1696278410.594:1236): pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:50.613225 kernel: audit: type=1006 audit(1696278410.595:1237): pid=2702 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 2 20:26:50.595000 audit[2702]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff7e1f9d90 a2=3 a3=0 items=0 ppid=1 pid=2702 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:26:50.595000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:26:50.628370 kernel: audit: type=1300 audit(1696278410.595:1237): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff7e1f9d90 a2=3 a3=0 items=0 ppid=1 pid=2702 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:26:50.628568 kernel: audit: type=1327 audit(1696278410.595:1237): proctitle=737368643A20636F7265205B707269765D Oct 2 20:26:50.627890 systemd[1]: Started session-18.scope. Oct 2 20:26:50.630126 systemd-logind[1040]: New session 18 of user core. Oct 2 20:26:50.636000 audit[2702]: USER_START pid=2702 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:50.640000 audit[2705]: CRED_ACQ pid=2705 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:50.650392 kernel: audit: type=1105 audit(1696278410.636:1238): pid=2702 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:52.529794 sshd[2702]: pam_unix(sshd:session): session closed for user core Oct 2 20:26:52.531000 audit[2702]: USER_END pid=2702 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:52.532000 audit[2702]: CRED_DISP pid=2702 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:52.536000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.85:22-172.24.4.1:56028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:52.537633 systemd[1]: Started sshd@18-172.24.4.85:22-172.24.4.1:56028.service. Oct 2 20:26:52.538822 systemd[1]: sshd@17-172.24.4.85:22-172.24.4.1:56014.service: Deactivated successfully. Oct 2 20:26:52.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.85:22-172.24.4.1:56014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:52.545012 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 20:26:52.547455 systemd-logind[1040]: Session 18 logged out. Waiting for processes to exit. Oct 2 20:26:52.554917 systemd-logind[1040]: Removed session 18. Oct 2 20:26:52.630605 kubelet[1967]: E1002 20:26:52.630509 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:26:52.727458 kubelet[1967]: E1002 20:26:52.727398 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:26:53.932000 audit[2713]: USER_ACCT pid=2713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:53.934369 sshd[2713]: Accepted publickey for core from 172.24.4.1 port 56028 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:26:53.934000 audit[2713]: CRED_ACQ pid=2713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:53.934000 audit[2713]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff89b0c990 a2=3 a3=0 items=0 ppid=1 pid=2713 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:26:53.934000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:26:53.939067 sshd[2713]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:26:53.952695 systemd[1]: Started session-19.scope. Oct 2 20:26:53.956708 systemd-logind[1040]: New session 19 of user core. Oct 2 20:26:53.971000 audit[2713]: USER_START pid=2713 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:53.974000 audit[2716]: CRED_ACQ pid=2716 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:54.757550 sshd[2713]: pam_unix(sshd:session): session closed for user core Oct 2 20:26:54.772626 kernel: kauditd_printk_skb: 12 callbacks suppressed Oct 2 20:26:54.772818 kernel: audit: type=1106 audit(1696278414.758:1249): pid=2713 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:54.758000 audit[2713]: USER_END pid=2713 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:54.765221 systemd-logind[1040]: Session 19 logged out. Waiting for processes to exit. Oct 2 20:26:54.767922 systemd[1]: sshd@18-172.24.4.85:22-172.24.4.1:56028.service: Deactivated successfully. Oct 2 20:26:54.769149 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 20:26:54.771915 systemd-logind[1040]: Removed session 19. Oct 2 20:26:54.774517 kernel: audit: type=1104 audit(1696278414.758:1250): pid=2713 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:54.758000 audit[2713]: CRED_DISP pid=2713 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:26:54.766000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.85:22-172.24.4.1:56028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:54.793566 kernel: audit: type=1131 audit(1696278414.766:1251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.85:22-172.24.4.1:56028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:26:57.728952 kubelet[1967]: E1002 20:26:57.728912 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:27:02.731683 kubelet[1967]: E1002 20:27:02.731580 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:27:04.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.85:22-172.24.4.1:52068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:27:04.770785 systemd[1]: Started sshd@19-172.24.4.85:22-172.24.4.1:52068.service. Oct 2 20:27:04.781363 kernel: audit: type=1130 audit(1696278424.770:1252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.85:22-172.24.4.1:52068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:27:06.013000 audit[2726]: USER_ACCT pid=2726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:06.014782 sshd[2726]: Accepted publickey for core from 172.24.4.1 port 52068 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:27:06.025350 kernel: audit: type=1101 audit(1696278426.013:1253): pid=2726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:06.028000 audit[2726]: CRED_ACQ pid=2726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:06.030937 sshd[2726]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:27:06.046465 kernel: audit: type=1103 audit(1696278426.028:1254): pid=2726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:06.046632 kernel: audit: type=1006 audit(1696278426.029:1255): pid=2726 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 20:27:06.047366 kernel: audit: type=1300 audit(1696278426.029:1255): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7538ffe0 a2=3 a3=0 items=0 ppid=1 pid=2726 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:27:06.029000 audit[2726]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7538ffe0 a2=3 a3=0 items=0 ppid=1 pid=2726 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:27:06.029000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:27:06.066373 kernel: audit: type=1327 audit(1696278426.029:1255): proctitle=737368643A20636F7265205B707269765D Oct 2 20:27:06.076705 systemd[1]: Started session-20.scope. Oct 2 20:27:06.078203 systemd-logind[1040]: New session 20 of user core. Oct 2 20:27:06.090000 audit[2726]: USER_START pid=2726 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:06.093000 audit[2728]: CRED_ACQ pid=2728 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:06.115112 kernel: audit: type=1105 audit(1696278426.090:1256): pid=2726 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:06.115571 kernel: audit: type=1103 audit(1696278426.093:1257): pid=2728 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:06.768724 sshd[2726]: pam_unix(sshd:session): session closed for user core Oct 2 20:27:06.770000 audit[2726]: USER_END pid=2726 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:06.774139 systemd[1]: sshd@19-172.24.4.85:22-172.24.4.1:52068.service: Deactivated successfully. Oct 2 20:27:06.775984 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 20:27:06.786368 kernel: audit: type=1106 audit(1696278426.770:1258): pid=2726 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:06.771000 audit[2726]: CRED_DISP pid=2726 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:06.774000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.85:22-172.24.4.1:52068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:27:06.801448 kernel: audit: type=1104 audit(1696278426.771:1259): pid=2726 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:06.800684 systemd-logind[1040]: Session 20 logged out. Waiting for processes to exit. Oct 2 20:27:06.802668 systemd-logind[1040]: Removed session 20. Oct 2 20:27:07.635209 env[1045]: time="2023-10-02T20:27:07.635049213Z" level=info msg="CreateContainer within sandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 20:27:07.666421 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1502799412.mount: Deactivated successfully. Oct 2 20:27:07.685098 env[1045]: time="2023-10-02T20:27:07.685020770Z" level=info msg="CreateContainer within sandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce\"" Oct 2 20:27:07.686689 env[1045]: time="2023-10-02T20:27:07.686631790Z" level=info msg="StartContainer for \"42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce\"" Oct 2 20:27:07.732901 kubelet[1967]: E1002 20:27:07.732855 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:27:07.739261 systemd[1]: Started cri-containerd-42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce.scope. Oct 2 20:27:07.760981 systemd[1]: cri-containerd-42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce.scope: Deactivated successfully. Oct 2 20:27:07.775012 env[1045]: time="2023-10-02T20:27:07.774960749Z" level=info msg="shim disconnected" id=42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce Oct 2 20:27:07.775264 env[1045]: time="2023-10-02T20:27:07.775245318Z" level=warning msg="cleaning up after shim disconnected" id=42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce namespace=k8s.io Oct 2 20:27:07.775389 env[1045]: time="2023-10-02T20:27:07.775372248Z" level=info msg="cleaning up dead shim" Oct 2 20:27:07.783921 env[1045]: time="2023-10-02T20:27:07.783869954Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:27:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2760 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:27:07Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:27:07.784177 env[1045]: time="2023-10-02T20:27:07.784113074Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 20:27:07.787897 env[1045]: time="2023-10-02T20:27:07.787854257Z" level=error msg="Failed to pipe stdout of container \"42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce\"" error="reading from a closed fifo" Oct 2 20:27:07.787949 env[1045]: time="2023-10-02T20:27:07.787923438Z" level=error msg="Failed to pipe stderr of container \"42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce\"" error="reading from a closed fifo" Oct 2 20:27:07.790828 env[1045]: time="2023-10-02T20:27:07.790763454Z" level=error msg="StartContainer for \"42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:27:07.791000 kubelet[1967]: E1002 20:27:07.790972 1967 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce" Oct 2 20:27:07.791085 kubelet[1967]: E1002 20:27:07.791078 1967 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:27:07.791085 kubelet[1967]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:27:07.791085 kubelet[1967]: rm /hostbin/cilium-mount Oct 2 20:27:07.791085 kubelet[1967]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-l9d5k,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:27:07.791228 kubelet[1967]: E1002 20:27:07.791120 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:27:08.387344 kubelet[1967]: I1002 20:27:08.387271 1967 scope.go:115] "RemoveContainer" containerID="75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f" Oct 2 20:27:08.388011 kubelet[1967]: I1002 20:27:08.387956 1967 scope.go:115] "RemoveContainer" containerID="75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f" Oct 2 20:27:08.391332 env[1045]: time="2023-10-02T20:27:08.391222740Z" level=info msg="RemoveContainer for \"75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f\"" Oct 2 20:27:08.393094 env[1045]: time="2023-10-02T20:27:08.392961512Z" level=info msg="RemoveContainer for \"75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f\"" Oct 2 20:27:08.396019 env[1045]: time="2023-10-02T20:27:08.394020937Z" level=error msg="RemoveContainer for \"75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f\" failed" error="failed to set removing state for container \"75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f\": container is already in removing state" Oct 2 20:27:08.396610 env[1045]: time="2023-10-02T20:27:08.396542642Z" level=info msg="RemoveContainer for \"75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f\" returns successfully" Oct 2 20:27:08.396966 kubelet[1967]: E1002 20:27:08.396893 1967 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f\": container is already in removing state" containerID="75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f" Oct 2 20:27:08.396966 kubelet[1967]: E1002 20:27:08.396963 1967 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "75993a94beaae1ae1189b4f12085990fe956f65410d53c7d316d8e50d78bb87f": container is already in removing state; Skipping pod "cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)" Oct 2 20:27:08.398211 kubelet[1967]: E1002 20:27:08.397671 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:27:08.657923 systemd[1]: run-containerd-runc-k8s.io-42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce-runc.vu5nZX.mount: Deactivated successfully. Oct 2 20:27:08.659099 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce-rootfs.mount: Deactivated successfully. Oct 2 20:27:10.886896 kubelet[1967]: W1002 20:27:10.886840 1967 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9abc2592_e1e2_4c84_9e2e_e1401d63ca17.slice/cri-containerd-42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce.scope WatchSource:0}: task 42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce not found: not found Oct 2 20:27:12.734104 kubelet[1967]: E1002 20:27:12.734063 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:27:16.777447 systemd[1]: Started sshd@20-172.24.4.85:22-172.24.4.1:40274.service. Oct 2 20:27:16.790946 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:27:16.791062 kernel: audit: type=1130 audit(1696278436.777:1261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.85:22-172.24.4.1:40274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:27:16.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.85:22-172.24.4.1:40274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:27:17.736704 kubelet[1967]: E1002 20:27:17.736546 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:27:18.019000 audit[2773]: USER_ACCT pid=2773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:18.035223 kernel: audit: type=1101 audit(1696278438.019:1262): pid=2773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:18.035698 sshd[2773]: Accepted publickey for core from 172.24.4.1 port 40274 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:27:18.036000 audit[2773]: CRED_ACQ pid=2773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:18.038644 sshd[2773]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:27:18.048377 kernel: audit: type=1103 audit(1696278438.036:1263): pid=2773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:18.055383 kernel: audit: type=1006 audit(1696278438.036:1264): pid=2773 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 20:27:18.055529 kernel: audit: type=1300 audit(1696278438.036:1264): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc22a656f0 a2=3 a3=0 items=0 ppid=1 pid=2773 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:27:18.036000 audit[2773]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc22a656f0 a2=3 a3=0 items=0 ppid=1 pid=2773 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:27:18.036000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:27:18.070813 kernel: audit: type=1327 audit(1696278438.036:1264): proctitle=737368643A20636F7265205B707269765D Oct 2 20:27:18.078067 systemd-logind[1040]: New session 21 of user core. Oct 2 20:27:18.080252 systemd[1]: Started session-21.scope. Oct 2 20:27:18.098000 audit[2773]: USER_START pid=2773 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:18.103000 audit[2777]: CRED_ACQ pid=2777 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:18.112611 kernel: audit: type=1105 audit(1696278438.098:1265): pid=2773 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:18.112796 kernel: audit: type=1103 audit(1696278438.103:1266): pid=2777 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:18.767092 sshd[2773]: pam_unix(sshd:session): session closed for user core Oct 2 20:27:18.769000 audit[2773]: USER_END pid=2773 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:18.769000 audit[2773]: CRED_DISP pid=2773 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:18.792059 kernel: audit: type=1106 audit(1696278438.769:1267): pid=2773 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:18.792227 kernel: audit: type=1104 audit(1696278438.769:1268): pid=2773 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:18.793194 systemd[1]: sshd@20-172.24.4.85:22-172.24.4.1:40274.service: Deactivated successfully. Oct 2 20:27:18.795175 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 20:27:18.793000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.85:22-172.24.4.1:40274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:27:18.799024 systemd-logind[1040]: Session 21 logged out. Waiting for processes to exit. Oct 2 20:27:18.801124 systemd-logind[1040]: Removed session 21. Oct 2 20:27:22.630913 kubelet[1967]: E1002 20:27:22.630863 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:27:22.738684 kubelet[1967]: E1002 20:27:22.738611 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:27:25.969000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:27:25.973085 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:27:25.973225 kernel: audit: type=1400 audit(1696278445.969:1270): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:27:25.969000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0026e6300 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:27:25.999258 kernel: audit: type=1300 audit(1696278445.969:1270): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0026e6300 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:27:25.999416 kernel: audit: type=1327 audit(1696278445.969:1270): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:27:25.969000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:27:25.969000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:27:26.021542 kernel: audit: type=1400 audit(1696278445.969:1271): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:27:26.021668 kernel: audit: type=1300 audit(1696278445.969:1271): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0026fe100 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:27:25.969000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0026fe100 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:27:25.969000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:27:26.047379 kernel: audit: type=1327 audit(1696278445.969:1271): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:27:27.740292 kubelet[1967]: E1002 20:27:27.740150 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:27:28.765000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:27:28.765000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c01081dc80 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:27:28.790198 kernel: audit: type=1400 audit(1696278448.765:1272): avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:27:28.790390 kernel: audit: type=1300 audit(1696278448.765:1272): arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c01081dc80 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:27:28.765000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:27:28.802376 kernel: audit: type=1327 audit(1696278448.765:1272): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:27:28.802727 systemd[1]: Started sshd@21-172.24.4.85:22-172.24.4.1:44898.service. Oct 2 20:27:28.765000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:27:28.765000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c010976a40 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:27:28.816595 kernel: audit: type=1400 audit(1696278448.765:1273): avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:27:28.765000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:27:28.771000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525627 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:27:28.771000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0108ab0b0 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:27:28.771000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:27:28.773000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525633 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:27:28.773000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0108ab0e0 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:27:28.773000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:27:28.779000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:27:28.779000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c010976a80 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:27:28.779000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:27:28.780000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:27:28.780000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0108ab140 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:27:28.780000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:27:28.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.85:22-172.24.4.1:44898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:27:29.988979 sshd[2788]: Accepted publickey for core from 172.24.4.1 port 44898 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:27:29.987000 audit[2788]: USER_ACCT pid=2788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:29.990000 audit[2788]: CRED_ACQ pid=2788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:29.990000 audit[2788]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffda733710 a2=3 a3=0 items=0 ppid=1 pid=2788 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:27:29.990000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:27:29.993453 sshd[2788]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:27:30.006030 systemd[1]: Started session-22.scope. Oct 2 20:27:30.006870 systemd-logind[1040]: New session 22 of user core. Oct 2 20:27:30.021000 audit[2788]: USER_START pid=2788 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:30.023000 audit[2793]: CRED_ACQ pid=2793 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:30.768753 sshd[2788]: pam_unix(sshd:session): session closed for user core Oct 2 20:27:30.769000 audit[2788]: USER_END pid=2788 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:30.769000 audit[2788]: CRED_DISP pid=2788 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:30.774124 systemd[1]: sshd@21-172.24.4.85:22-172.24.4.1:44898.service: Deactivated successfully. Oct 2 20:27:30.773000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.85:22-172.24.4.1:44898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:27:30.775246 systemd-logind[1040]: Session 22 logged out. Waiting for processes to exit. Oct 2 20:27:30.775614 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 20:27:30.778763 systemd-logind[1040]: Removed session 22. Oct 2 20:27:32.742701 kubelet[1967]: E1002 20:27:32.742664 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:27:33.630557 kubelet[1967]: E1002 20:27:33.630507 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:27:37.745562 kubelet[1967]: E1002 20:27:37.745492 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:27:40.777252 systemd[1]: Started sshd@22-172.24.4.85:22-172.24.4.1:55388.service. Oct 2 20:27:40.790066 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:27:40.790168 kernel: audit: type=1130 audit(1696278460.776:1287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.85:22-172.24.4.1:55388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:27:40.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.85:22-172.24.4.1:55388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:27:41.997000 audit[2805]: USER_ACCT pid=2805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:41.999513 sshd[2805]: Accepted publickey for core from 172.24.4.1 port 55388 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:27:42.008000 audit[2805]: CRED_ACQ pid=2805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:42.011795 sshd[2805]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:27:42.020445 kernel: audit: type=1101 audit(1696278461.997:1288): pid=2805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:42.020575 kernel: audit: type=1103 audit(1696278462.008:1289): pid=2805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:42.027375 kernel: audit: type=1006 audit(1696278462.009:1290): pid=2805 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 20:27:42.009000 audit[2805]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3984fca0 a2=3 a3=0 items=0 ppid=1 pid=2805 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:27:42.009000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:27:42.045725 kernel: audit: type=1300 audit(1696278462.009:1290): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3984fca0 a2=3 a3=0 items=0 ppid=1 pid=2805 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:27:42.045848 kernel: audit: type=1327 audit(1696278462.009:1290): proctitle=737368643A20636F7265205B707269765D Oct 2 20:27:42.049266 systemd-logind[1040]: New session 23 of user core. Oct 2 20:27:42.051959 systemd[1]: Started session-23.scope. Oct 2 20:27:42.065000 audit[2805]: USER_START pid=2805 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:42.079392 kernel: audit: type=1105 audit(1696278462.065:1291): pid=2805 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:42.078000 audit[2807]: CRED_ACQ pid=2807 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:42.090404 kernel: audit: type=1103 audit(1696278462.078:1292): pid=2807 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:42.747157 kubelet[1967]: E1002 20:27:42.747085 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:27:42.768201 sshd[2805]: pam_unix(sshd:session): session closed for user core Oct 2 20:27:42.768000 audit[2805]: USER_END pid=2805 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:42.782402 kernel: audit: type=1106 audit(1696278462.768:1293): pid=2805 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:42.769000 audit[2805]: CRED_DISP pid=2805 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:42.784854 systemd[1]: sshd@22-172.24.4.85:22-172.24.4.1:55388.service: Deactivated successfully. Oct 2 20:27:42.787020 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 20:27:42.792495 systemd-logind[1040]: Session 23 logged out. Waiting for processes to exit. Oct 2 20:27:42.783000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.85:22-172.24.4.1:55388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:27:42.793590 kernel: audit: type=1104 audit(1696278462.769:1294): pid=2805 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:42.795281 systemd-logind[1040]: Removed session 23. Oct 2 20:27:44.015000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:27:44.015000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00272c0e0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:27:44.015000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:27:44.015000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:27:44.015000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00272c100 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:27:44.015000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:27:44.019000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:27:44.019000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00272c220 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:27:44.019000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:27:44.031000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:27:44.031000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002532fc0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:27:44.031000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:27:47.630215 kubelet[1967]: E1002 20:27:47.630163 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:27:47.750332 kubelet[1967]: E1002 20:27:47.750233 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:27:52.752741 kubelet[1967]: E1002 20:27:52.752643 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:27:52.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.85:22-172.24.4.1:60614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:27:52.779682 systemd[1]: Started sshd@23-172.24.4.85:22-172.24.4.1:60614.service. Oct 2 20:27:52.783774 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:27:52.783941 kernel: audit: type=1130 audit(1696278472.778:1300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.85:22-172.24.4.1:60614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:27:54.019000 audit[2820]: USER_ACCT pid=2820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:54.021674 sshd[2820]: Accepted publickey for core from 172.24.4.1 port 60614 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:27:54.031000 audit[2820]: CRED_ACQ pid=2820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:54.034102 sshd[2820]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:27:54.043665 kernel: audit: type=1101 audit(1696278474.019:1301): pid=2820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:54.043800 kernel: audit: type=1103 audit(1696278474.031:1302): pid=2820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:54.051133 kernel: audit: type=1006 audit(1696278474.032:1303): pid=2820 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 20:27:54.032000 audit[2820]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2100aa70 a2=3 a3=0 items=0 ppid=1 pid=2820 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:27:54.062390 kernel: audit: type=1300 audit(1696278474.032:1303): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2100aa70 a2=3 a3=0 items=0 ppid=1 pid=2820 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:27:54.067892 kernel: audit: type=1327 audit(1696278474.032:1303): proctitle=737368643A20636F7265205B707269765D Oct 2 20:27:54.032000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:27:54.067333 systemd-logind[1040]: New session 24 of user core. Oct 2 20:27:54.069124 systemd[1]: Started session-24.scope. Oct 2 20:27:54.080000 audit[2820]: USER_START pid=2820 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:54.094994 kernel: audit: type=1105 audit(1696278474.080:1304): pid=2820 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:54.095167 kernel: audit: type=1103 audit(1696278474.093:1305): pid=2822 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:54.093000 audit[2822]: CRED_ACQ pid=2822 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:54.767996 sshd[2820]: pam_unix(sshd:session): session closed for user core Oct 2 20:27:54.768000 audit[2820]: USER_END pid=2820 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:54.782392 kernel: audit: type=1106 audit(1696278474.768:1306): pid=2820 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:54.768000 audit[2820]: CRED_DISP pid=2820 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:54.783982 systemd[1]: sshd@23-172.24.4.85:22-172.24.4.1:60614.service: Deactivated successfully. Oct 2 20:27:54.785473 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 20:27:54.793627 kernel: audit: type=1104 audit(1696278474.768:1307): pid=2820 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:27:54.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.85:22-172.24.4.1:60614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:27:54.794154 systemd-logind[1040]: Session 24 logged out. Waiting for processes to exit. Oct 2 20:27:54.796271 systemd-logind[1040]: Removed session 24. Oct 2 20:27:57.754407 kubelet[1967]: E1002 20:27:57.754364 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:28:00.632766 kubelet[1967]: E1002 20:28:00.632704 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:28:02.756355 kubelet[1967]: E1002 20:28:02.756291 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:28:04.790003 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:28:04.790197 kernel: audit: type=1130 audit(1696278484.777:1309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.24.4.85:22-172.24.4.1:42716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:04.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.24.4.85:22-172.24.4.1:42716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:04.777761 systemd[1]: Started sshd@24-172.24.4.85:22-172.24.4.1:42716.service. Oct 2 20:28:06.029000 audit[2832]: USER_ACCT pid=2832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:06.041150 sshd[2832]: Accepted publickey for core from 172.24.4.1 port 42716 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:28:06.041701 kernel: audit: type=1101 audit(1696278486.029:1310): pid=2832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:06.040000 audit[2832]: CRED_ACQ pid=2832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:06.042263 sshd[2832]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:28:06.052465 kernel: audit: type=1103 audit(1696278486.040:1311): pid=2832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:06.040000 audit[2832]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdc8998630 a2=3 a3=0 items=0 ppid=1 pid=2832 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:28:06.072139 kernel: audit: type=1006 audit(1696278486.040:1312): pid=2832 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 20:28:06.072259 kernel: audit: type=1300 audit(1696278486.040:1312): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdc8998630 a2=3 a3=0 items=0 ppid=1 pid=2832 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:28:06.040000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:28:06.077575 kernel: audit: type=1327 audit(1696278486.040:1312): proctitle=737368643A20636F7265205B707269765D Oct 2 20:28:06.084841 systemd-logind[1040]: New session 25 of user core. Oct 2 20:28:06.086869 systemd[1]: Started session-25.scope. Oct 2 20:28:06.099000 audit[2832]: USER_START pid=2832 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:06.100000 audit[2834]: CRED_ACQ pid=2834 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:06.122972 kernel: audit: type=1105 audit(1696278486.099:1313): pid=2832 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:06.123115 kernel: audit: type=1103 audit(1696278486.100:1314): pid=2834 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:06.767659 sshd[2832]: pam_unix(sshd:session): session closed for user core Oct 2 20:28:06.769000 audit[2832]: USER_END pid=2832 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:06.775000 audit[2832]: CRED_DISP pid=2832 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:06.783152 systemd[1]: sshd@24-172.24.4.85:22-172.24.4.1:42716.service: Deactivated successfully. Oct 2 20:28:06.784669 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 20:28:06.791883 kernel: audit: type=1106 audit(1696278486.769:1315): pid=2832 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:06.792067 kernel: audit: type=1104 audit(1696278486.775:1316): pid=2832 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:06.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.24.4.85:22-172.24.4.1:42716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:06.796104 systemd-logind[1040]: Session 25 logged out. Waiting for processes to exit. Oct 2 20:28:06.798362 systemd-logind[1040]: Removed session 25. Oct 2 20:28:07.758571 kubelet[1967]: E1002 20:28:07.758497 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:28:11.630171 kubelet[1967]: E1002 20:28:11.630119 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:28:12.760522 kubelet[1967]: E1002 20:28:12.760438 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:28:16.799711 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:28:16.800100 kernel: audit: type=1130 audit(1696278496.777:1318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.24.4.85:22-172.24.4.1:57348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:16.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.24.4.85:22-172.24.4.1:57348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:16.778232 systemd[1]: Started sshd@25-172.24.4.85:22-172.24.4.1:57348.service. Oct 2 20:28:17.762328 kubelet[1967]: E1002 20:28:17.762203 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:28:18.028166 sshd[2845]: Accepted publickey for core from 172.24.4.1 port 57348 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:28:18.026000 audit[2845]: USER_ACCT pid=2845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:18.039000 audit[2845]: CRED_ACQ pid=2845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:18.040612 sshd[2845]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:28:18.049919 kernel: audit: type=1101 audit(1696278498.026:1319): pid=2845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:18.050038 kernel: audit: type=1103 audit(1696278498.039:1320): pid=2845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:18.050869 kernel: audit: type=1006 audit(1696278498.039:1321): pid=2845 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 20:28:18.039000 audit[2845]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb06834a0 a2=3 a3=0 items=0 ppid=1 pid=2845 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:28:18.068202 kernel: audit: type=1300 audit(1696278498.039:1321): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb06834a0 a2=3 a3=0 items=0 ppid=1 pid=2845 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:28:18.039000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:28:18.074234 kernel: audit: type=1327 audit(1696278498.039:1321): proctitle=737368643A20636F7265205B707269765D Oct 2 20:28:18.079970 systemd[1]: Started session-26.scope. Oct 2 20:28:18.081646 systemd-logind[1040]: New session 26 of user core. Oct 2 20:28:18.092000 audit[2845]: USER_START pid=2845 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:18.092000 audit[2849]: CRED_ACQ pid=2849 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:18.115537 kernel: audit: type=1105 audit(1696278498.092:1322): pid=2845 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:18.115648 kernel: audit: type=1103 audit(1696278498.092:1323): pid=2849 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:18.664738 sshd[2845]: pam_unix(sshd:session): session closed for user core Oct 2 20:28:18.665000 audit[2845]: USER_END pid=2845 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:18.680964 systemd[1]: sshd@25-172.24.4.85:22-172.24.4.1:57348.service: Deactivated successfully. Oct 2 20:28:18.681445 kernel: audit: type=1106 audit(1696278498.665:1324): pid=2845 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:18.665000 audit[2845]: CRED_DISP pid=2845 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:18.682705 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 20:28:18.692403 kernel: audit: type=1104 audit(1696278498.665:1325): pid=2845 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:18.693211 systemd-logind[1040]: Session 26 logged out. Waiting for processes to exit. Oct 2 20:28:18.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.24.4.85:22-172.24.4.1:57348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:18.695531 systemd-logind[1040]: Removed session 26. Oct 2 20:28:22.764228 kubelet[1967]: E1002 20:28:22.764114 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:28:23.630288 kubelet[1967]: E1002 20:28:23.630245 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:28:25.970000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:28:25.974077 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:28:25.974271 kernel: audit: type=1400 audit(1696278505.970:1327): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:28:25.970000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:28:25.999093 kernel: audit: type=1400 audit(1696278505.970:1328): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:28:25.999401 kernel: audit: type=1300 audit(1696278505.970:1328): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f30e70 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:28:25.970000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f30e70 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:28:26.015412 kernel: audit: type=1327 audit(1696278505.970:1328): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:28:25.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:28:25.970000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000d28cc0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:28:26.044026 kernel: audit: type=1300 audit(1696278505.970:1327): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000d28cc0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:28:26.044243 kernel: audit: type=1327 audit(1696278505.970:1327): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:28:25.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:28:27.766997 kubelet[1967]: E1002 20:28:27.766944 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:28:28.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.24.4.85:22-172.24.4.1:55588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:28.671504 systemd[1]: Started sshd@26-172.24.4.85:22-172.24.4.1:55588.service. Oct 2 20:28:28.682475 kernel: audit: type=1130 audit(1696278508.670:1329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.24.4.85:22-172.24.4.1:55588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:28.767000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:28:28.767000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c002bb2460 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:28:28.790343 kernel: audit: type=1400 audit(1696278508.767:1330): avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:28:28.790513 kernel: audit: type=1300 audit(1696278508.767:1330): arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c002bb2460 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:28:28.767000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:28:28.801585 kernel: audit: type=1327 audit(1696278508.767:1330): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:28:28.767000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:28:28.767000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c009002c60 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:28:28.767000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:28:28.776000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525633 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:28:28.776000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c008d2de60 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:28:28.776000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:28:28.776000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525627 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:28:28.776000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c008d2de90 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:28:28.776000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:28:28.780000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:28:28.780000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c002b88d80 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:28:28.780000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:28:28.780000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:28:28.780000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c008c220c0 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:28:28.780000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:28:29.806000 audit[2859]: USER_ACCT pid=2859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:29.808530 sshd[2859]: Accepted publickey for core from 172.24.4.1 port 55588 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:28:29.808000 audit[2859]: CRED_ACQ pid=2859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:29.808000 audit[2859]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc52206400 a2=3 a3=0 items=0 ppid=1 pid=2859 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:28:29.808000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:28:29.811006 sshd[2859]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:28:29.820536 systemd-logind[1040]: New session 27 of user core. Oct 2 20:28:29.822455 systemd[1]: Started session-27.scope. Oct 2 20:28:29.834000 audit[2859]: USER_START pid=2859 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:29.837000 audit[2861]: CRED_ACQ pid=2861 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:30.539685 sshd[2859]: pam_unix(sshd:session): session closed for user core Oct 2 20:28:30.540000 audit[2859]: USER_END pid=2859 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:30.541000 audit[2859]: CRED_DISP pid=2859 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:30.545281 systemd[1]: sshd@26-172.24.4.85:22-172.24.4.1:55588.service: Deactivated successfully. Oct 2 20:28:30.544000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.24.4.85:22-172.24.4.1:55588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:30.546781 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 20:28:30.548664 systemd-logind[1040]: Session 27 logged out. Waiting for processes to exit. Oct 2 20:28:30.551248 systemd-logind[1040]: Removed session 27. Oct 2 20:28:32.769955 kubelet[1967]: E1002 20:28:32.769902 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:28:34.630395 kubelet[1967]: E1002 20:28:34.630294 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-fspk5_kube-system(9abc2592-e1e2-4c84-9e2e-e1401d63ca17)\"" pod="kube-system/cilium-fspk5" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 Oct 2 20:28:37.771833 kubelet[1967]: E1002 20:28:37.771793 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:28:40.555183 systemd[1]: Started sshd@27-172.24.4.85:22-172.24.4.1:43258.service. Oct 2 20:28:40.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.24.4.85:22-172.24.4.1:43258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:40.560435 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:28:40.560579 kernel: audit: type=1130 audit(1696278520.555:1344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.24.4.85:22-172.24.4.1:43258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:41.777000 audit[2872]: USER_ACCT pid=2872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:41.779207 sshd[2872]: Accepted publickey for core from 172.24.4.1 port 43258 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:28:41.790399 kernel: audit: type=1101 audit(1696278521.777:1345): pid=2872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:41.791000 audit[2872]: CRED_ACQ pid=2872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:41.794402 sshd[2872]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:28:41.810377 kernel: audit: type=1103 audit(1696278521.791:1346): pid=2872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:41.810596 kernel: audit: type=1006 audit(1696278521.791:1347): pid=2872 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 20:28:41.810668 kernel: audit: type=1300 audit(1696278521.791:1347): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc40065680 a2=3 a3=0 items=0 ppid=1 pid=2872 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:28:41.791000 audit[2872]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc40065680 a2=3 a3=0 items=0 ppid=1 pid=2872 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:28:41.791000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:28:41.827362 kernel: audit: type=1327 audit(1696278521.791:1347): proctitle=737368643A20636F7265205B707269765D Oct 2 20:28:41.832390 systemd-logind[1040]: New session 28 of user core. Oct 2 20:28:41.834262 systemd[1]: Started session-28.scope. Oct 2 20:28:41.846000 audit[2872]: USER_START pid=2872 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:41.851000 audit[2874]: CRED_ACQ pid=2874 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:41.870639 kernel: audit: type=1105 audit(1696278521.846:1348): pid=2872 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:41.870783 kernel: audit: type=1103 audit(1696278521.851:1349): pid=2874 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:42.527491 sshd[2872]: pam_unix(sshd:session): session closed for user core Oct 2 20:28:42.535795 systemd[1]: Started sshd@28-172.24.4.85:22-172.24.4.1:43260.service. Oct 2 20:28:42.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.24.4.85:22-172.24.4.1:43260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:42.553077 kernel: audit: type=1130 audit(1696278522.534:1350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.24.4.85:22-172.24.4.1:43260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:42.553227 kernel: audit: type=1106 audit(1696278522.546:1351): pid=2872 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:42.546000 audit[2872]: USER_END pid=2872 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:42.550569 systemd[1]: sshd@27-172.24.4.85:22-172.24.4.1:43258.service: Deactivated successfully. Oct 2 20:28:42.552268 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 20:28:42.546000 audit[2872]: CRED_DISP pid=2872 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:42.549000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.24.4.85:22-172.24.4.1:43258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:42.565575 systemd-logind[1040]: Session 28 logged out. Waiting for processes to exit. Oct 2 20:28:42.567746 systemd-logind[1040]: Removed session 28. Oct 2 20:28:42.774761 kubelet[1967]: E1002 20:28:42.774718 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:28:43.777000 audit[2883]: USER_ACCT pid=2883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:43.779391 sshd[2883]: Accepted publickey for core from 172.24.4.1 port 43260 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:28:43.779000 audit[2883]: CRED_ACQ pid=2883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:43.780000 audit[2883]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff38c4b670 a2=3 a3=0 items=0 ppid=1 pid=2883 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:28:43.780000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:28:43.781995 sshd[2883]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:28:43.793286 systemd-logind[1040]: New session 29 of user core. Oct 2 20:28:43.793778 systemd[1]: Started session-29.scope. Oct 2 20:28:43.806000 audit[2883]: USER_START pid=2883 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:43.809000 audit[2886]: CRED_ACQ pid=2886 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:44.015000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:28:44.015000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00101f4c0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:28:44.015000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:28:44.016000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:28:44.016000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000df2340 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:28:44.016000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:28:44.022000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:28:44.022000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000df24e0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:28:44.022000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:28:44.033000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:28:44.033000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00101f5e0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:28:44.033000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:28:47.746480 env[1045]: time="2023-10-02T20:28:47.746360109Z" level=info msg="StopPodSandbox for \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\"" Oct 2 20:28:47.747225 env[1045]: time="2023-10-02T20:28:47.747194328Z" level=info msg="Container to stop \"42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:28:47.749846 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260-shm.mount: Deactivated successfully. Oct 2 20:28:47.763327 kernel: kauditd_printk_skb: 21 callbacks suppressed Oct 2 20:28:47.763621 kernel: audit: type=1334 audit(1696278527.759:1363): prog-id=123 op=UNLOAD Oct 2 20:28:47.759000 audit: BPF prog-id=123 op=UNLOAD Oct 2 20:28:47.760621 systemd[1]: cri-containerd-51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260.scope: Deactivated successfully. Oct 2 20:28:47.765000 audit: BPF prog-id=126 op=UNLOAD Oct 2 20:28:47.767524 env[1045]: time="2023-10-02T20:28:47.767377960Z" level=info msg="StopContainer for \"46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492\" with timeout 30 (s)" Oct 2 20:28:47.768433 kernel: audit: type=1334 audit(1696278527.765:1364): prog-id=126 op=UNLOAD Oct 2 20:28:47.768751 env[1045]: time="2023-10-02T20:28:47.768725301Z" level=info msg="Stop container \"46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492\" with signal terminated" Oct 2 20:28:47.776982 kubelet[1967]: E1002 20:28:47.776906 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:28:47.803053 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260-rootfs.mount: Deactivated successfully. Oct 2 20:28:47.803000 audit: BPF prog-id=127 op=UNLOAD Oct 2 20:28:47.804844 systemd[1]: cri-containerd-46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492.scope: Deactivated successfully. Oct 2 20:28:47.807459 kernel: audit: type=1334 audit(1696278527.803:1365): prog-id=127 op=UNLOAD Oct 2 20:28:47.811360 kernel: audit: type=1334 audit(1696278527.807:1366): prog-id=130 op=UNLOAD Oct 2 20:28:47.807000 audit: BPF prog-id=130 op=UNLOAD Oct 2 20:28:47.820854 env[1045]: time="2023-10-02T20:28:47.820762129Z" level=info msg="shim disconnected" id=51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260 Oct 2 20:28:47.822076 env[1045]: time="2023-10-02T20:28:47.822047652Z" level=warning msg="cleaning up after shim disconnected" id=51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260 namespace=k8s.io Oct 2 20:28:47.822166 env[1045]: time="2023-10-02T20:28:47.822150457Z" level=info msg="cleaning up dead shim" Oct 2 20:28:47.844367 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492-rootfs.mount: Deactivated successfully. Oct 2 20:28:47.854766 env[1045]: time="2023-10-02T20:28:47.846552766Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:28:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2927 runtime=io.containerd.runc.v2\n" Oct 2 20:28:47.854766 env[1045]: time="2023-10-02T20:28:47.846997237Z" level=info msg="TearDown network for sandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" successfully" Oct 2 20:28:47.854766 env[1045]: time="2023-10-02T20:28:47.847021855Z" level=info msg="StopPodSandbox for \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" returns successfully" Oct 2 20:28:47.925263 env[1045]: time="2023-10-02T20:28:47.925169665Z" level=info msg="shim disconnected" id=46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492 Oct 2 20:28:47.925689 env[1045]: time="2023-10-02T20:28:47.925641299Z" level=warning msg="cleaning up after shim disconnected" id=46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492 namespace=k8s.io Oct 2 20:28:47.925852 env[1045]: time="2023-10-02T20:28:47.925817272Z" level=info msg="cleaning up dead shim" Oct 2 20:28:47.944523 kubelet[1967]: I1002 20:28:47.943113 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-l9d5k\" (UniqueName: \"kubernetes.io/projected/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-kube-api-access-l9d5k\") pod \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " Oct 2 20:28:47.944523 kubelet[1967]: I1002 20:28:47.943250 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-lib-modules\") pod \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " Oct 2 20:28:47.944523 kubelet[1967]: I1002 20:28:47.943413 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-cni-path\") pod \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " Oct 2 20:28:47.944523 kubelet[1967]: I1002 20:28:47.943493 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-bpf-maps\") pod \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " Oct 2 20:28:47.944523 kubelet[1967]: I1002 20:28:47.943574 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-cilium-cgroup\") pod \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " Oct 2 20:28:47.944523 kubelet[1967]: I1002 20:28:47.943645 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-etc-cni-netd\") pod \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " Oct 2 20:28:47.945183 kubelet[1967]: I1002 20:28:47.943703 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-host-proc-sys-net\") pod \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " Oct 2 20:28:47.945183 kubelet[1967]: I1002 20:28:47.943792 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-cilium-run\") pod \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " Oct 2 20:28:47.945183 kubelet[1967]: I1002 20:28:47.943884 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-cilium-config-path\") pod \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " Oct 2 20:28:47.945183 kubelet[1967]: I1002 20:28:47.943968 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-xtables-lock\") pod \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " Oct 2 20:28:47.945183 kubelet[1967]: I1002 20:28:47.944061 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-clustermesh-secrets\") pod \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " Oct 2 20:28:47.945183 kubelet[1967]: I1002 20:28:47.944553 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-host-proc-sys-kernel\") pod \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " Oct 2 20:28:47.945719 kubelet[1967]: I1002 20:28:47.944642 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-hubble-tls\") pod \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " Oct 2 20:28:47.945719 kubelet[1967]: I1002 20:28:47.944707 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-hostproc\") pod \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\" (UID: \"9abc2592-e1e2-4c84-9e2e-e1401d63ca17\") " Oct 2 20:28:47.945719 kubelet[1967]: I1002 20:28:47.944819 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-hostproc" (OuterVolumeSpecName: "hostproc") pod "9abc2592-e1e2-4c84-9e2e-e1401d63ca17" (UID: "9abc2592-e1e2-4c84-9e2e-e1401d63ca17"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:28:47.945719 kubelet[1967]: I1002 20:28:47.944908 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "9abc2592-e1e2-4c84-9e2e-e1401d63ca17" (UID: "9abc2592-e1e2-4c84-9e2e-e1401d63ca17"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:28:47.945719 kubelet[1967]: I1002 20:28:47.944989 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-cni-path" (OuterVolumeSpecName: "cni-path") pod "9abc2592-e1e2-4c84-9e2e-e1401d63ca17" (UID: "9abc2592-e1e2-4c84-9e2e-e1401d63ca17"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:28:47.946071 kubelet[1967]: I1002 20:28:47.945039 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "9abc2592-e1e2-4c84-9e2e-e1401d63ca17" (UID: "9abc2592-e1e2-4c84-9e2e-e1401d63ca17"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:28:47.946071 kubelet[1967]: I1002 20:28:47.945086 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "9abc2592-e1e2-4c84-9e2e-e1401d63ca17" (UID: "9abc2592-e1e2-4c84-9e2e-e1401d63ca17"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:28:47.946071 kubelet[1967]: I1002 20:28:47.945133 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "9abc2592-e1e2-4c84-9e2e-e1401d63ca17" (UID: "9abc2592-e1e2-4c84-9e2e-e1401d63ca17"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:28:47.946071 kubelet[1967]: I1002 20:28:47.945180 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "9abc2592-e1e2-4c84-9e2e-e1401d63ca17" (UID: "9abc2592-e1e2-4c84-9e2e-e1401d63ca17"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:28:47.946071 kubelet[1967]: I1002 20:28:47.945231 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "9abc2592-e1e2-4c84-9e2e-e1401d63ca17" (UID: "9abc2592-e1e2-4c84-9e2e-e1401d63ca17"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:28:47.946475 kubelet[1967]: W1002 20:28:47.945861 1967 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/9abc2592-e1e2-4c84-9e2e-e1401d63ca17/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:28:47.954778 kubelet[1967]: I1002 20:28:47.954700 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "9abc2592-e1e2-4c84-9e2e-e1401d63ca17" (UID: "9abc2592-e1e2-4c84-9e2e-e1401d63ca17"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:28:47.955667 kubelet[1967]: I1002 20:28:47.955623 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "9abc2592-e1e2-4c84-9e2e-e1401d63ca17" (UID: "9abc2592-e1e2-4c84-9e2e-e1401d63ca17"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:28:47.957445 kubelet[1967]: I1002 20:28:47.957235 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "9abc2592-e1e2-4c84-9e2e-e1401d63ca17" (UID: "9abc2592-e1e2-4c84-9e2e-e1401d63ca17"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:28:47.960172 env[1045]: time="2023-10-02T20:28:47.960075199Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:28:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2946 runtime=io.containerd.runc.v2\n" Oct 2 20:28:47.969776 env[1045]: time="2023-10-02T20:28:47.969500564Z" level=info msg="StopContainer for \"46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492\" returns successfully" Oct 2 20:28:47.970926 env[1045]: time="2023-10-02T20:28:47.970825602Z" level=info msg="StopPodSandbox for \"a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843\"" Oct 2 20:28:47.971172 env[1045]: time="2023-10-02T20:28:47.971031613Z" level=info msg="Container to stop \"46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:28:47.974640 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843-shm.mount: Deactivated successfully. Oct 2 20:28:47.980129 systemd[1]: var-lib-kubelet-pods-9abc2592\x2de1e2\x2d4c84\x2d9e2e\x2de1401d63ca17-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dl9d5k.mount: Deactivated successfully. Oct 2 20:28:47.987494 kubelet[1967]: I1002 20:28:47.987426 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-kube-api-access-l9d5k" (OuterVolumeSpecName: "kube-api-access-l9d5k") pod "9abc2592-e1e2-4c84-9e2e-e1401d63ca17" (UID: "9abc2592-e1e2-4c84-9e2e-e1401d63ca17"). InnerVolumeSpecName "kube-api-access-l9d5k". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:28:47.990247 kubelet[1967]: I1002 20:28:47.990173 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "9abc2592-e1e2-4c84-9e2e-e1401d63ca17" (UID: "9abc2592-e1e2-4c84-9e2e-e1401d63ca17"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:28:48.000467 kubelet[1967]: I1002 20:28:47.998914 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "9abc2592-e1e2-4c84-9e2e-e1401d63ca17" (UID: "9abc2592-e1e2-4c84-9e2e-e1401d63ca17"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:28:48.003000 audit: BPF prog-id=112 op=UNLOAD Oct 2 20:28:48.004797 systemd[1]: cri-containerd-a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843.scope: Deactivated successfully. Oct 2 20:28:48.008348 kernel: audit: type=1334 audit(1696278528.003:1367): prog-id=112 op=UNLOAD Oct 2 20:28:48.007000 audit: BPF prog-id=115 op=UNLOAD Oct 2 20:28:48.010316 kernel: audit: type=1334 audit(1696278528.007:1368): prog-id=115 op=UNLOAD Oct 2 20:28:48.045331 kubelet[1967]: I1002 20:28:48.045203 1967 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-host-proc-sys-net\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:28:48.045331 kubelet[1967]: I1002 20:28:48.045238 1967 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-cilium-run\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:28:48.045331 kubelet[1967]: I1002 20:28:48.045254 1967 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-cilium-config-path\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:28:48.045331 kubelet[1967]: I1002 20:28:48.045269 1967 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-xtables-lock\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:28:48.045331 kubelet[1967]: I1002 20:28:48.045283 1967 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-clustermesh-secrets\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:28:48.045842 kubelet[1967]: I1002 20:28:48.045689 1967 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-host-proc-sys-kernel\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:28:48.045842 kubelet[1967]: I1002 20:28:48.045714 1967 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-hubble-tls\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:28:48.045842 kubelet[1967]: I1002 20:28:48.045727 1967 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-hostproc\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:28:48.045842 kubelet[1967]: I1002 20:28:48.045741 1967 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-l9d5k\" (UniqueName: \"kubernetes.io/projected/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-kube-api-access-l9d5k\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:28:48.045842 kubelet[1967]: I1002 20:28:48.045770 1967 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-lib-modules\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:28:48.045842 kubelet[1967]: I1002 20:28:48.045783 1967 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-cilium-cgroup\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:28:48.045842 kubelet[1967]: I1002 20:28:48.045797 1967 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-cni-path\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:28:48.046058 kubelet[1967]: I1002 20:28:48.045809 1967 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-bpf-maps\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:28:48.046058 kubelet[1967]: I1002 20:28:48.045823 1967 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/9abc2592-e1e2-4c84-9e2e-e1401d63ca17-etc-cni-netd\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:28:48.046458 env[1045]: time="2023-10-02T20:28:48.046388941Z" level=info msg="shim disconnected" id=a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843 Oct 2 20:28:48.046531 env[1045]: time="2023-10-02T20:28:48.046460337Z" level=warning msg="cleaning up after shim disconnected" id=a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843 namespace=k8s.io Oct 2 20:28:48.046531 env[1045]: time="2023-10-02T20:28:48.046473161Z" level=info msg="cleaning up dead shim" Oct 2 20:28:48.056249 env[1045]: time="2023-10-02T20:28:48.056174417Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:28:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2983 runtime=io.containerd.runc.v2\n" Oct 2 20:28:48.056736 env[1045]: time="2023-10-02T20:28:48.056703910Z" level=info msg="TearDown network for sandbox \"a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843\" successfully" Oct 2 20:28:48.056798 env[1045]: time="2023-10-02T20:28:48.056737173Z" level=info msg="StopPodSandbox for \"a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843\" returns successfully" Oct 2 20:28:48.147869 kubelet[1967]: I1002 20:28:48.146433 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-kmr56\" (UniqueName: \"kubernetes.io/projected/a5da83e1-31e5-451e-ac63-778e65b7a16a-kube-api-access-kmr56\") pod \"a5da83e1-31e5-451e-ac63-778e65b7a16a\" (UID: \"a5da83e1-31e5-451e-ac63-778e65b7a16a\") " Oct 2 20:28:48.147869 kubelet[1967]: I1002 20:28:48.146573 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/a5da83e1-31e5-451e-ac63-778e65b7a16a-cilium-config-path\") pod \"a5da83e1-31e5-451e-ac63-778e65b7a16a\" (UID: \"a5da83e1-31e5-451e-ac63-778e65b7a16a\") " Oct 2 20:28:48.147869 kubelet[1967]: W1002 20:28:48.147092 1967 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/a5da83e1-31e5-451e-ac63-778e65b7a16a/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:28:48.153462 kubelet[1967]: I1002 20:28:48.153376 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/a5da83e1-31e5-451e-ac63-778e65b7a16a-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "a5da83e1-31e5-451e-ac63-778e65b7a16a" (UID: "a5da83e1-31e5-451e-ac63-778e65b7a16a"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:28:48.154157 kubelet[1967]: I1002 20:28:48.154105 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/a5da83e1-31e5-451e-ac63-778e65b7a16a-kube-api-access-kmr56" (OuterVolumeSpecName: "kube-api-access-kmr56") pod "a5da83e1-31e5-451e-ac63-778e65b7a16a" (UID: "a5da83e1-31e5-451e-ac63-778e65b7a16a"). InnerVolumeSpecName "kube-api-access-kmr56". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:28:48.247556 kubelet[1967]: I1002 20:28:48.247513 1967 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-kmr56\" (UniqueName: \"kubernetes.io/projected/a5da83e1-31e5-451e-ac63-778e65b7a16a-kube-api-access-kmr56\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:28:48.247873 kubelet[1967]: I1002 20:28:48.247822 1967 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/a5da83e1-31e5-451e-ac63-778e65b7a16a-cilium-config-path\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:28:48.638811 systemd[1]: Removed slice kubepods-burstable-pod9abc2592_e1e2_4c84_9e2e_e1401d63ca17.slice. Oct 2 20:28:48.642643 systemd[1]: Removed slice kubepods-besteffort-poda5da83e1_31e5_451e_ac63_778e65b7a16a.slice. Oct 2 20:28:48.704364 kubelet[1967]: I1002 20:28:48.704290 1967 scope.go:115] "RemoveContainer" containerID="46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492" Oct 2 20:28:48.707488 env[1045]: time="2023-10-02T20:28:48.706631068Z" level=info msg="RemoveContainer for \"46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492\"" Oct 2 20:28:48.714790 env[1045]: time="2023-10-02T20:28:48.714355984Z" level=info msg="RemoveContainer for \"46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492\" returns successfully" Oct 2 20:28:48.715220 kubelet[1967]: I1002 20:28:48.715189 1967 scope.go:115] "RemoveContainer" containerID="46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492" Oct 2 20:28:48.716060 env[1045]: time="2023-10-02T20:28:48.715840905Z" level=error msg="ContainerStatus for \"46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492\": not found" Oct 2 20:28:48.717569 kubelet[1967]: E1002 20:28:48.717516 1967 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492\": not found" containerID="46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492" Oct 2 20:28:48.717833 kubelet[1967]: I1002 20:28:48.717786 1967 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492} err="failed to get container status \"46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492\": rpc error: code = NotFound desc = an error occurred when try to find container \"46b5af1c7c50fe6a8ca084f1d913c110f8805b6ea9f97ccb80439921840cc492\": not found" Oct 2 20:28:48.718014 kubelet[1967]: I1002 20:28:48.717991 1967 scope.go:115] "RemoveContainer" containerID="42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce" Oct 2 20:28:48.720392 env[1045]: time="2023-10-02T20:28:48.720197432Z" level=info msg="RemoveContainer for \"42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce\"" Oct 2 20:28:48.728383 env[1045]: time="2023-10-02T20:28:48.728263864Z" level=info msg="RemoveContainer for \"42f7985bdeed27fda88d76e196353d2e001531ce273bb0c4d3ee23bd9e2250ce\" returns successfully" Oct 2 20:28:48.749097 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843-rootfs.mount: Deactivated successfully. Oct 2 20:28:48.749228 systemd[1]: var-lib-kubelet-pods-a5da83e1\x2d31e5\x2d451e\x2dac63\x2d778e65b7a16a-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dkmr56.mount: Deactivated successfully. Oct 2 20:28:48.749321 systemd[1]: var-lib-kubelet-pods-9abc2592\x2de1e2\x2d4c84\x2d9e2e\x2de1401d63ca17-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:28:48.749397 systemd[1]: var-lib-kubelet-pods-9abc2592\x2de1e2\x2d4c84\x2d9e2e\x2de1401d63ca17-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:28:49.870443 sshd[2883]: pam_unix(sshd:session): session closed for user core Oct 2 20:28:49.877760 systemd[1]: Started sshd@29-172.24.4.85:22-172.24.4.1:45650.service. Oct 2 20:28:49.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.24.4.85:22-172.24.4.1:45650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:49.891144 kernel: audit: type=1130 audit(1696278529.877:1369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.24.4.85:22-172.24.4.1:45650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:49.886000 audit[2883]: USER_END pid=2883 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:49.891997 systemd-logind[1040]: Session 29 logged out. Waiting for processes to exit. Oct 2 20:28:49.892452 systemd[1]: sshd@28-172.24.4.85:22-172.24.4.1:43260.service: Deactivated successfully. Oct 2 20:28:49.894143 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 20:28:49.894549 systemd[1]: session-29.scope: Consumed 2.763s CPU time. Oct 2 20:28:49.903355 kernel: audit: type=1106 audit(1696278529.886:1370): pid=2883 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:49.904433 systemd-logind[1040]: Removed session 29. Oct 2 20:28:49.887000 audit[2883]: CRED_DISP pid=2883 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:49.916943 kernel: audit: type=1104 audit(1696278529.887:1371): pid=2883 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:49.891000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.24.4.85:22-172.24.4.1:43260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:49.927400 kernel: audit: type=1131 audit(1696278529.891:1372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.24.4.85:22-172.24.4.1:43260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:28:50.636973 kubelet[1967]: I1002 20:28:50.636926 1967 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=9abc2592-e1e2-4c84-9e2e-e1401d63ca17 path="/var/lib/kubelet/pods/9abc2592-e1e2-4c84-9e2e-e1401d63ca17/volumes" Oct 2 20:28:50.639006 kubelet[1967]: I1002 20:28:50.638968 1967 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=a5da83e1-31e5-451e-ac63-778e65b7a16a path="/var/lib/kubelet/pods/a5da83e1-31e5-451e-ac63-778e65b7a16a/volumes" Oct 2 20:28:50.985000 audit[2998]: USER_ACCT pid=2998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:50.988388 sshd[2998]: Accepted publickey for core from 172.24.4.1 port 45650 ssh2: RSA SHA256:04DBnBUG6fFEh6RHhq3Vh04U7QWBRpG3v2XU9WHMKYg Oct 2 20:28:50.989000 audit[2998]: CRED_ACQ pid=2998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:50.989000 audit[2998]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5b491150 a2=3 a3=0 items=0 ppid=1 pid=2998 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:28:50.989000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:28:50.991487 sshd[2998]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:28:51.002431 systemd-logind[1040]: New session 30 of user core. Oct 2 20:28:51.002687 systemd[1]: Started session-30.scope. Oct 2 20:28:51.014000 audit[2998]: USER_START pid=2998 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:51.018000 audit[3001]: CRED_ACQ pid=3001 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:28:52.222225 kubelet[1967]: I1002 20:28:52.221117 1967 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:28:52.222225 kubelet[1967]: E1002 20:28:52.221171 1967 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="a5da83e1-31e5-451e-ac63-778e65b7a16a" containerName="cilium-operator" Oct 2 20:28:52.222225 kubelet[1967]: E1002 20:28:52.221182 1967 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="9abc2592-e1e2-4c84-9e2e-e1401d63ca17" containerName="mount-cgroup" Oct 2 20:28:52.222225 kubelet[1967]: E1002 20:28:52.221190 1967 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="9abc2592-e1e2-4c84-9e2e-e1401d63ca17" containerName="mount-cgroup" Oct 2 20:28:52.222225 kubelet[1967]: E1002 20:28:52.221198 1967 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="9abc2592-e1e2-4c84-9e2e-e1401d63ca17" containerName="mount-cgroup" Oct 2 20:28:52.222225 kubelet[1967]: E1002 20:28:52.221206 1967 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="9abc2592-e1e2-4c84-9e2e-e1401d63ca17" containerName="mount-cgroup" Oct 2 20:28:52.222225 kubelet[1967]: I1002 20:28:52.221225 1967 memory_manager.go:346] "RemoveStaleState removing state" podUID="a5da83e1-31e5-451e-ac63-778e65b7a16a" containerName="cilium-operator" Oct 2 20:28:52.222225 kubelet[1967]: I1002 20:28:52.221232 1967 memory_manager.go:346] "RemoveStaleState removing state" podUID="9abc2592-e1e2-4c84-9e2e-e1401d63ca17" containerName="mount-cgroup" Oct 2 20:28:52.222225 kubelet[1967]: I1002 20:28:52.221239 1967 memory_manager.go:346] "RemoveStaleState removing state" podUID="9abc2592-e1e2-4c84-9e2e-e1401d63ca17" containerName="mount-cgroup" Oct 2 20:28:52.222225 kubelet[1967]: I1002 20:28:52.221247 1967 memory_manager.go:346] "RemoveStaleState removing state" podUID="9abc2592-e1e2-4c84-9e2e-e1401d63ca17" containerName="mount-cgroup" Oct 2 20:28:52.222225 kubelet[1967]: I1002 20:28:52.221254 1967 memory_manager.go:346] "RemoveStaleState removing state" podUID="9abc2592-e1e2-4c84-9e2e-e1401d63ca17" containerName="mount-cgroup" Oct 2 20:28:52.222225 kubelet[1967]: E1002 20:28:52.221270 1967 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="9abc2592-e1e2-4c84-9e2e-e1401d63ca17" containerName="mount-cgroup" Oct 2 20:28:52.222225 kubelet[1967]: E1002 20:28:52.221279 1967 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="9abc2592-e1e2-4c84-9e2e-e1401d63ca17" containerName="mount-cgroup" Oct 2 20:28:52.222891 kubelet[1967]: I1002 20:28:52.221313 1967 memory_manager.go:346] "RemoveStaleState removing state" podUID="9abc2592-e1e2-4c84-9e2e-e1401d63ca17" containerName="mount-cgroup" Oct 2 20:28:52.222891 kubelet[1967]: I1002 20:28:52.221322 1967 memory_manager.go:346] "RemoveStaleState removing state" podUID="9abc2592-e1e2-4c84-9e2e-e1401d63ca17" containerName="mount-cgroup" Oct 2 20:28:52.227809 systemd[1]: Created slice kubepods-burstable-poda0f98ac2_4089_4400_9c4b_ea27ff172a68.slice. Oct 2 20:28:52.281925 kubelet[1967]: I1002 20:28:52.281896 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f24p8\" (UniqueName: \"kubernetes.io/projected/a0f98ac2-4089-4400-9c4b-ea27ff172a68-kube-api-access-f24p8\") pod \"cilium-4sbd5\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " pod="kube-system/cilium-4sbd5" Oct 2 20:28:52.282162 kubelet[1967]: I1002 20:28:52.282151 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cni-path\") pod \"cilium-4sbd5\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " pod="kube-system/cilium-4sbd5" Oct 2 20:28:52.282280 kubelet[1967]: I1002 20:28:52.282270 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-xtables-lock\") pod \"cilium-4sbd5\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " pod="kube-system/cilium-4sbd5" Oct 2 20:28:52.282420 kubelet[1967]: I1002 20:28:52.282410 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/a0f98ac2-4089-4400-9c4b-ea27ff172a68-hubble-tls\") pod \"cilium-4sbd5\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " pod="kube-system/cilium-4sbd5" Oct 2 20:28:52.282528 kubelet[1967]: I1002 20:28:52.282518 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/a0f98ac2-4089-4400-9c4b-ea27ff172a68-clustermesh-secrets\") pod \"cilium-4sbd5\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " pod="kube-system/cilium-4sbd5" Oct 2 20:28:52.282647 kubelet[1967]: I1002 20:28:52.282638 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-host-proc-sys-net\") pod \"cilium-4sbd5\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " pod="kube-system/cilium-4sbd5" Oct 2 20:28:52.282759 kubelet[1967]: I1002 20:28:52.282749 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-host-proc-sys-kernel\") pod \"cilium-4sbd5\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " pod="kube-system/cilium-4sbd5" Oct 2 20:28:52.282868 kubelet[1967]: I1002 20:28:52.282858 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-bpf-maps\") pod \"cilium-4sbd5\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " pod="kube-system/cilium-4sbd5" Oct 2 20:28:52.282975 kubelet[1967]: I1002 20:28:52.282966 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-hostproc\") pod \"cilium-4sbd5\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " pod="kube-system/cilium-4sbd5" Oct 2 20:28:52.283096 kubelet[1967]: I1002 20:28:52.283086 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cilium-cgroup\") pod \"cilium-4sbd5\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " pod="kube-system/cilium-4sbd5" Oct 2 20:28:52.283215 kubelet[1967]: I1002 20:28:52.283205 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cilium-ipsec-secrets\") pod \"cilium-4sbd5\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " pod="kube-system/cilium-4sbd5" Oct 2 20:28:52.283343 kubelet[1967]: I1002 20:28:52.283333 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cilium-run\") pod \"cilium-4sbd5\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " pod="kube-system/cilium-4sbd5" Oct 2 20:28:52.283459 kubelet[1967]: I1002 20:28:52.283450 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-lib-modules\") pod \"cilium-4sbd5\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " pod="kube-system/cilium-4sbd5" Oct 2 20:28:52.283578 kubelet[1967]: I1002 20:28:52.283568 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-etc-cni-netd\") pod \"cilium-4sbd5\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " pod="kube-system/cilium-4sbd5" Oct 2 20:28:52.283682 kubelet[1967]: I1002 20:28:52.283671 1967 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cilium-config-path\") pod \"cilium-4sbd5\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " pod="kube-system/cilium-4sbd5" Oct 2 20:28:52.533131 env[1045]: time="2023-10-02T20:28:52.532930097Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-4sbd5,Uid:a0f98ac2-4089-4400-9c4b-ea27ff172a68,Namespace:kube-system,Attempt:0,}" Oct 2 20:28:52.567415 env[1045]: time="2023-10-02T20:28:52.566922822Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:28:52.567415 env[1045]: time="2023-10-02T20:28:52.567016470Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:28:52.567415 env[1045]: time="2023-10-02T20:28:52.567073127Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:28:52.568075 env[1045]: time="2023-10-02T20:28:52.567955638Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d pid=3018 runtime=io.containerd.runc.v2 Oct 2 20:28:52.594399 systemd[1]: Started cri-containerd-a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d.scope. Oct 2 20:28:52.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.627000 audit: BPF prog-id=131 op=LOAD Oct 2 20:28:52.637000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.637000 audit[3028]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3018 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:28:52.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139613335643131383835386262653436333239386231643033396631 Oct 2 20:28:52.637000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.637000 audit[3028]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3018 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:28:52.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139613335643131383835386262653436333239386231643033396631 Oct 2 20:28:52.638000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.638000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.638000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.638000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.638000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.638000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.638000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.638000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.638000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.638000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.638000 audit: BPF prog-id=132 op=LOAD Oct 2 20:28:52.638000 audit[3028]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001d9b10 items=0 ppid=3018 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:28:52.638000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139613335643131383835386262653436333239386231643033396631 Oct 2 20:28:52.639000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.639000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.639000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.639000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.639000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.639000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.639000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.639000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.639000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.639000 audit: BPF prog-id=133 op=LOAD Oct 2 20:28:52.639000 audit[3028]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001d9b58 items=0 ppid=3018 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:28:52.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139613335643131383835386262653436333239386231643033396631 Oct 2 20:28:52.640000 audit: BPF prog-id=133 op=UNLOAD Oct 2 20:28:52.640000 audit: BPF prog-id=132 op=UNLOAD Oct 2 20:28:52.640000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.640000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.640000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.640000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.640000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.640000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.640000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.640000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.640000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.640000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:28:52.640000 audit: BPF prog-id=134 op=LOAD Oct 2 20:28:52.640000 audit[3028]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001d9f68 items=0 ppid=3018 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:28:52.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139613335643131383835386262653436333239386231643033396631 Oct 2 20:28:52.657444 env[1045]: time="2023-10-02T20:28:52.657393194Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-4sbd5,Uid:a0f98ac2-4089-4400-9c4b-ea27ff172a68,Namespace:kube-system,Attempt:0,} returns sandbox id \"a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d\"" Oct 2 20:28:52.661403 env[1045]: time="2023-10-02T20:28:52.661362379Z" level=info msg="CreateContainer within sandbox \"a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:28:52.676541 env[1045]: time="2023-10-02T20:28:52.676494987Z" level=info msg="CreateContainer within sandbox \"a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535\"" Oct 2 20:28:52.680281 env[1045]: time="2023-10-02T20:28:52.678403891Z" level=info msg="StartContainer for \"cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535\"" Oct 2 20:28:52.697267 systemd[1]: Started cri-containerd-cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535.scope. Oct 2 20:28:52.709550 systemd[1]: cri-containerd-cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535.scope: Deactivated successfully. Oct 2 20:28:52.734440 env[1045]: time="2023-10-02T20:28:52.734390708Z" level=info msg="shim disconnected" id=cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535 Oct 2 20:28:52.734703 env[1045]: time="2023-10-02T20:28:52.734683823Z" level=warning msg="cleaning up after shim disconnected" id=cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535 namespace=k8s.io Oct 2 20:28:52.734814 env[1045]: time="2023-10-02T20:28:52.734798430Z" level=info msg="cleaning up dead shim" Oct 2 20:28:52.743174 env[1045]: time="2023-10-02T20:28:52.743127759Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:28:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3077 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:28:52Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:28:52.743651 env[1045]: time="2023-10-02T20:28:52.743594853Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 20:28:52.744389 env[1045]: time="2023-10-02T20:28:52.744355483Z" level=error msg="Failed to pipe stdout of container \"cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535\"" error="reading from a closed fifo" Oct 2 20:28:52.744862 env[1045]: time="2023-10-02T20:28:52.744834520Z" level=error msg="Failed to pipe stderr of container \"cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535\"" error="reading from a closed fifo" Oct 2 20:28:52.747972 env[1045]: time="2023-10-02T20:28:52.747917086Z" level=error msg="StartContainer for \"cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:28:52.748325 kubelet[1967]: E1002 20:28:52.748154 1967 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535" Oct 2 20:28:52.748325 kubelet[1967]: E1002 20:28:52.748253 1967 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:28:52.748325 kubelet[1967]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:28:52.748325 kubelet[1967]: rm /hostbin/cilium-mount Oct 2 20:28:52.748550 kubelet[1967]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-f24p8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-4sbd5_kube-system(a0f98ac2-4089-4400-9c4b-ea27ff172a68): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:28:52.749820 kubelet[1967]: E1002 20:28:52.748659 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4sbd5" podUID=a0f98ac2-4089-4400-9c4b-ea27ff172a68 Oct 2 20:28:52.777757 kubelet[1967]: E1002 20:28:52.777717 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:28:53.741175 env[1045]: time="2023-10-02T20:28:53.741098183Z" level=info msg="CreateContainer within sandbox \"a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:28:53.777414 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1093522346.mount: Deactivated successfully. Oct 2 20:28:53.787492 env[1045]: time="2023-10-02T20:28:53.787398810Z" level=info msg="CreateContainer within sandbox \"a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e\"" Oct 2 20:28:53.789211 env[1045]: time="2023-10-02T20:28:53.789142792Z" level=info msg="StartContainer for \"dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e\"" Oct 2 20:28:53.837522 systemd[1]: Started cri-containerd-dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e.scope. Oct 2 20:28:53.859890 systemd[1]: cri-containerd-dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e.scope: Deactivated successfully. Oct 2 20:28:53.870110 env[1045]: time="2023-10-02T20:28:53.870063643Z" level=info msg="shim disconnected" id=dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e Oct 2 20:28:53.870379 env[1045]: time="2023-10-02T20:28:53.870360626Z" level=warning msg="cleaning up after shim disconnected" id=dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e namespace=k8s.io Oct 2 20:28:53.870479 env[1045]: time="2023-10-02T20:28:53.870462890Z" level=info msg="cleaning up dead shim" Oct 2 20:28:53.878673 env[1045]: time="2023-10-02T20:28:53.878622377Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:28:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3114 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:28:53Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:28:53.878928 env[1045]: time="2023-10-02T20:28:53.878877090Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 20:28:53.880405 env[1045]: time="2023-10-02T20:28:53.880358033Z" level=error msg="Failed to pipe stdout of container \"dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e\"" error="reading from a closed fifo" Oct 2 20:28:53.881551 env[1045]: time="2023-10-02T20:28:53.881499635Z" level=error msg="Failed to pipe stderr of container \"dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e\"" error="reading from a closed fifo" Oct 2 20:28:53.887340 env[1045]: time="2023-10-02T20:28:53.884726043Z" level=error msg="StartContainer for \"dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:28:53.888132 kubelet[1967]: E1002 20:28:53.887595 1967 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e" Oct 2 20:28:53.888132 kubelet[1967]: E1002 20:28:53.887717 1967 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:28:53.888132 kubelet[1967]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:28:53.888132 kubelet[1967]: rm /hostbin/cilium-mount Oct 2 20:28:53.888549 kubelet[1967]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-f24p8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-4sbd5_kube-system(a0f98ac2-4089-4400-9c4b-ea27ff172a68): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:28:53.888623 kubelet[1967]: E1002 20:28:53.887776 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4sbd5" podUID=a0f98ac2-4089-4400-9c4b-ea27ff172a68 Oct 2 20:28:54.390329 systemd[1]: run-containerd-runc-k8s.io-dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e-runc.nTjiwA.mount: Deactivated successfully. Oct 2 20:28:54.390568 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e-rootfs.mount: Deactivated successfully. Oct 2 20:28:54.743101 kubelet[1967]: I1002 20:28:54.742936 1967 scope.go:115] "RemoveContainer" containerID="cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535" Oct 2 20:28:54.743729 kubelet[1967]: I1002 20:28:54.743676 1967 scope.go:115] "RemoveContainer" containerID="cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535" Oct 2 20:28:54.753080 env[1045]: time="2023-10-02T20:28:54.752976698Z" level=info msg="RemoveContainer for \"cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535\"" Oct 2 20:28:54.759731 env[1045]: time="2023-10-02T20:28:54.759673036Z" level=info msg="RemoveContainer for \"cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535\"" Oct 2 20:28:54.760118 env[1045]: time="2023-10-02T20:28:54.760038338Z" level=error msg="RemoveContainer for \"cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535\" failed" error="rpc error: code = NotFound desc = get container info: container \"cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535\" in namespace \"k8s.io\": not found" Oct 2 20:28:54.760583 kubelet[1967]: E1002 20:28:54.760553 1967 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = NotFound desc = get container info: container \"cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535\" in namespace \"k8s.io\": not found" containerID="cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535" Oct 2 20:28:54.760812 kubelet[1967]: E1002 20:28:54.760786 1967 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = NotFound desc = get container info: container "cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535" in namespace "k8s.io": not found; Skipping pod "cilium-4sbd5_kube-system(a0f98ac2-4089-4400-9c4b-ea27ff172a68)" Oct 2 20:28:54.761636 kubelet[1967]: E1002 20:28:54.761605 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-4sbd5_kube-system(a0f98ac2-4089-4400-9c4b-ea27ff172a68)\"" pod="kube-system/cilium-4sbd5" podUID=a0f98ac2-4089-4400-9c4b-ea27ff172a68 Oct 2 20:28:54.767325 env[1045]: time="2023-10-02T20:28:54.767206128Z" level=info msg="RemoveContainer for \"cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535\" returns successfully" Oct 2 20:28:55.748877 kubelet[1967]: E1002 20:28:55.748821 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-4sbd5_kube-system(a0f98ac2-4089-4400-9c4b-ea27ff172a68)\"" pod="kube-system/cilium-4sbd5" podUID=a0f98ac2-4089-4400-9c4b-ea27ff172a68 Oct 2 20:28:55.843170 kubelet[1967]: W1002 20:28:55.843054 1967 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poda0f98ac2_4089_4400_9c4b_ea27ff172a68.slice/cri-containerd-cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535.scope WatchSource:0}: container "cb91bb079a4f630efe5d0f3a5822626e55cf0e4af18bfcfcb75abad344329535" in namespace "k8s.io": not found Oct 2 20:28:57.779609 kubelet[1967]: E1002 20:28:57.779546 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:28:58.958337 kubelet[1967]: W1002 20:28:58.958093 1967 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poda0f98ac2_4089_4400_9c4b_ea27ff172a68.slice/cri-containerd-dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e.scope WatchSource:0}: task dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e not found: not found Oct 2 20:29:02.780742 kubelet[1967]: E1002 20:29:02.780615 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:29:07.782253 kubelet[1967]: E1002 20:29:07.782191 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:29:10.648703 env[1045]: time="2023-10-02T20:29:10.647803507Z" level=info msg="CreateContainer within sandbox \"a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:29:10.672931 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3410525277.mount: Deactivated successfully. Oct 2 20:29:10.699405 env[1045]: time="2023-10-02T20:29:10.699206695Z" level=info msg="CreateContainer within sandbox \"a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc\"" Oct 2 20:29:10.700832 env[1045]: time="2023-10-02T20:29:10.700641301Z" level=info msg="StartContainer for \"20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc\"" Oct 2 20:29:10.756645 systemd[1]: Started cri-containerd-20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc.scope. Oct 2 20:29:10.775281 systemd[1]: cri-containerd-20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc.scope: Deactivated successfully. Oct 2 20:29:10.987555 env[1045]: time="2023-10-02T20:29:10.987366838Z" level=info msg="shim disconnected" id=20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc Oct 2 20:29:10.989008 env[1045]: time="2023-10-02T20:29:10.988104645Z" level=warning msg="cleaning up after shim disconnected" id=20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc namespace=k8s.io Oct 2 20:29:10.989008 env[1045]: time="2023-10-02T20:29:10.988163957Z" level=info msg="cleaning up dead shim" Oct 2 20:29:11.008763 env[1045]: time="2023-10-02T20:29:11.008666464Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:29:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3152 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:29:11Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:29:11.009352 env[1045]: time="2023-10-02T20:29:11.009187279Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 20:29:11.009893 env[1045]: time="2023-10-02T20:29:11.009788698Z" level=error msg="Failed to pipe stdout of container \"20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc\"" error="reading from a closed fifo" Oct 2 20:29:11.010089 env[1045]: time="2023-10-02T20:29:11.010007091Z" level=error msg="Failed to pipe stderr of container \"20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc\"" error="reading from a closed fifo" Oct 2 20:29:11.015881 env[1045]: time="2023-10-02T20:29:11.015777105Z" level=error msg="StartContainer for \"20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:29:11.016444 kubelet[1967]: E1002 20:29:11.016387 1967 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc" Oct 2 20:29:11.017332 kubelet[1967]: E1002 20:29:11.017243 1967 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:29:11.017332 kubelet[1967]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:29:11.017332 kubelet[1967]: rm /hostbin/cilium-mount Oct 2 20:29:11.017332 kubelet[1967]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-f24p8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-4sbd5_kube-system(a0f98ac2-4089-4400-9c4b-ea27ff172a68): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:29:11.017884 kubelet[1967]: E1002 20:29:11.017677 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4sbd5" podUID=a0f98ac2-4089-4400-9c4b-ea27ff172a68 Oct 2 20:29:11.664232 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc-rootfs.mount: Deactivated successfully. Oct 2 20:29:11.798123 kubelet[1967]: I1002 20:29:11.798015 1967 scope.go:115] "RemoveContainer" containerID="dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e" Oct 2 20:29:11.798861 kubelet[1967]: I1002 20:29:11.798792 1967 scope.go:115] "RemoveContainer" containerID="dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e" Oct 2 20:29:11.801095 env[1045]: time="2023-10-02T20:29:11.801034378Z" level=info msg="RemoveContainer for \"dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e\"" Oct 2 20:29:11.802273 env[1045]: time="2023-10-02T20:29:11.802223750Z" level=info msg="RemoveContainer for \"dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e\"" Oct 2 20:29:11.802853 env[1045]: time="2023-10-02T20:29:11.802782337Z" level=error msg="RemoveContainer for \"dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e\" failed" error="failed to set removing state for container \"dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e\": container is already in removing state" Oct 2 20:29:11.805001 kubelet[1967]: E1002 20:29:11.803638 1967 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e\": container is already in removing state" containerID="dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e" Oct 2 20:29:11.805001 kubelet[1967]: E1002 20:29:11.803737 1967 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e": container is already in removing state; Skipping pod "cilium-4sbd5_kube-system(a0f98ac2-4089-4400-9c4b-ea27ff172a68)" Oct 2 20:29:11.805001 kubelet[1967]: E1002 20:29:11.804443 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-4sbd5_kube-system(a0f98ac2-4089-4400-9c4b-ea27ff172a68)\"" pod="kube-system/cilium-4sbd5" podUID=a0f98ac2-4089-4400-9c4b-ea27ff172a68 Oct 2 20:29:11.813499 env[1045]: time="2023-10-02T20:29:11.813362157Z" level=info msg="RemoveContainer for \"dcdf1193d8cadea9fe25d114cffcd80e2db740ad9f55a78e1d475e86044af39e\" returns successfully" Oct 2 20:29:12.784917 kubelet[1967]: E1002 20:29:12.784854 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:29:14.095759 kubelet[1967]: W1002 20:29:14.095705 1967 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poda0f98ac2_4089_4400_9c4b_ea27ff172a68.slice/cri-containerd-20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc.scope WatchSource:0}: task 20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc not found: not found Oct 2 20:29:17.786464 kubelet[1967]: E1002 20:29:17.786420 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:29:22.788825 kubelet[1967]: E1002 20:29:22.788783 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:29:24.630102 kubelet[1967]: E1002 20:29:24.630031 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-4sbd5_kube-system(a0f98ac2-4089-4400-9c4b-ea27ff172a68)\"" pod="kube-system/cilium-4sbd5" podUID=a0f98ac2-4089-4400-9c4b-ea27ff172a68 Oct 2 20:29:25.970000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:25.974328 kernel: kauditd_printk_skb: 64 callbacks suppressed Oct 2 20:29:25.974398 kernel: audit: type=1400 audit(1696278565.970:1396): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:25.970000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f31770 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:29:25.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:29:26.009456 kernel: audit: type=1300 audit(1696278565.970:1396): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f31770 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:29:26.009663 kernel: audit: type=1327 audit(1696278565.970:1396): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:29:26.009796 kernel: audit: type=1400 audit(1696278565.972:1397): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:25.972000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:25.972000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cce300 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:29:26.026163 kernel: audit: type=1300 audit(1696278565.972:1397): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cce300 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:29:26.026328 kernel: audit: type=1327 audit(1696278565.972:1397): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:29:25.972000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:29:27.791735 kubelet[1967]: E1002 20:29:27.791689 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:29:28.767000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:28.767000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:28.793327 kernel: audit: type=1400 audit(1696278568.767:1398): avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:28.793475 kernel: audit: type=1400 audit(1696278568.767:1399): avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:28.767000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c007878220 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:29:28.767000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:29:28.818012 kernel: audit: type=1300 audit(1696278568.767:1399): arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c007878220 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:29:28.818207 kernel: audit: type=1327 audit(1696278568.767:1399): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:29:28.767000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00f466960 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:29:28.767000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:29:28.777000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=525627 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:28.777000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00f52e450 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:29:28.777000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:29:28.777000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=525633 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:28.777000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00f52e480 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:29:28.777000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:29:28.781000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:28.781000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0078ea820 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:29:28.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:29:28.781000 audit[1816]: AVC avc: denied { watch } for pid=1816 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=525631 scontext=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:28.781000 audit[1816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00f4669f0 a2=fc6 a3=0 items=0 ppid=1689 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c555,c903 key=(null) Oct 2 20:29:28.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E3835002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:29:32.558259 env[1045]: time="2023-10-02T20:29:32.558122019Z" level=info msg="StopPodSandbox for \"a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843\"" Oct 2 20:29:32.559186 env[1045]: time="2023-10-02T20:29:32.558439841Z" level=info msg="TearDown network for sandbox \"a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843\" successfully" Oct 2 20:29:32.559186 env[1045]: time="2023-10-02T20:29:32.558544730Z" level=info msg="StopPodSandbox for \"a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843\" returns successfully" Oct 2 20:29:32.559804 env[1045]: time="2023-10-02T20:29:32.559712842Z" level=info msg="RemovePodSandbox for \"a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843\"" Oct 2 20:29:32.559967 env[1045]: time="2023-10-02T20:29:32.559792542Z" level=info msg="Forcibly stopping sandbox \"a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843\"" Oct 2 20:29:32.560174 env[1045]: time="2023-10-02T20:29:32.560049088Z" level=info msg="TearDown network for sandbox \"a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843\" successfully" Oct 2 20:29:32.567954 env[1045]: time="2023-10-02T20:29:32.567825921Z" level=info msg="RemovePodSandbox \"a2515f0e41591c3d9e7a4a2a2b6b0abfb309bf72e46ed1bf123a426d70d20843\" returns successfully" Oct 2 20:29:32.569276 env[1045]: time="2023-10-02T20:29:32.569185215Z" level=info msg="StopPodSandbox for \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\"" Oct 2 20:29:32.569777 env[1045]: time="2023-10-02T20:29:32.569608626Z" level=info msg="TearDown network for sandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" successfully" Oct 2 20:29:32.569934 env[1045]: time="2023-10-02T20:29:32.569803034Z" level=info msg="StopPodSandbox for \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" returns successfully" Oct 2 20:29:32.573345 env[1045]: time="2023-10-02T20:29:32.570692138Z" level=info msg="RemovePodSandbox for \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\"" Oct 2 20:29:32.573345 env[1045]: time="2023-10-02T20:29:32.570762982Z" level=info msg="Forcibly stopping sandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\"" Oct 2 20:29:32.573345 env[1045]: time="2023-10-02T20:29:32.570959513Z" level=info msg="TearDown network for sandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" successfully" Oct 2 20:29:32.577179 env[1045]: time="2023-10-02T20:29:32.577108115Z" level=info msg="RemovePodSandbox \"51f3452787ff53d5afd45c3251630a35db55d6d9d0e5d3328fab0ca978699260\" returns successfully" Oct 2 20:29:32.794321 kubelet[1967]: E1002 20:29:32.794224 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:29:37.796026 kubelet[1967]: E1002 20:29:37.795842 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:29:39.636799 env[1045]: time="2023-10-02T20:29:39.636488419Z" level=info msg="CreateContainer within sandbox \"a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:29:39.667991 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2530365715.mount: Deactivated successfully. Oct 2 20:29:39.680108 env[1045]: time="2023-10-02T20:29:39.680023832Z" level=info msg="CreateContainer within sandbox \"a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff\"" Oct 2 20:29:39.681710 env[1045]: time="2023-10-02T20:29:39.681621196Z" level=info msg="StartContainer for \"ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff\"" Oct 2 20:29:39.724050 systemd[1]: Started cri-containerd-ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff.scope. Oct 2 20:29:39.739917 systemd[1]: cri-containerd-ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff.scope: Deactivated successfully. Oct 2 20:29:39.755551 env[1045]: time="2023-10-02T20:29:39.755506378Z" level=info msg="shim disconnected" id=ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff Oct 2 20:29:39.755777 env[1045]: time="2023-10-02T20:29:39.755756962Z" level=warning msg="cleaning up after shim disconnected" id=ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff namespace=k8s.io Oct 2 20:29:39.755882 env[1045]: time="2023-10-02T20:29:39.755866189Z" level=info msg="cleaning up dead shim" Oct 2 20:29:39.762974 env[1045]: time="2023-10-02T20:29:39.762930423Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:29:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3193 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:29:39Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:29:39.763402 env[1045]: time="2023-10-02T20:29:39.763342423Z" level=error msg="copy shim log" error="read /proc/self/fd/44: file already closed" Oct 2 20:29:39.764710 env[1045]: time="2023-10-02T20:29:39.763613356Z" level=error msg="Failed to pipe stdout of container \"ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff\"" error="reading from a closed fifo" Oct 2 20:29:39.764880 env[1045]: time="2023-10-02T20:29:39.764837414Z" level=error msg="Failed to pipe stderr of container \"ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff\"" error="reading from a closed fifo" Oct 2 20:29:39.767767 env[1045]: time="2023-10-02T20:29:39.767707788Z" level=error msg="StartContainer for \"ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:29:39.768242 kubelet[1967]: E1002 20:29:39.768053 1967 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff" Oct 2 20:29:39.768242 kubelet[1967]: E1002 20:29:39.768152 1967 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:29:39.768242 kubelet[1967]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:29:39.768242 kubelet[1967]: rm /hostbin/cilium-mount Oct 2 20:29:39.768719 kubelet[1967]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-f24p8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-4sbd5_kube-system(a0f98ac2-4089-4400-9c4b-ea27ff172a68): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:29:39.768791 kubelet[1967]: E1002 20:29:39.768193 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4sbd5" podUID=a0f98ac2-4089-4400-9c4b-ea27ff172a68 Oct 2 20:29:39.896035 kubelet[1967]: I1002 20:29:39.894277 1967 scope.go:115] "RemoveContainer" containerID="20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc" Oct 2 20:29:39.897243 kubelet[1967]: I1002 20:29:39.897159 1967 scope.go:115] "RemoveContainer" containerID="20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc" Oct 2 20:29:39.902380 env[1045]: time="2023-10-02T20:29:39.901395680Z" level=info msg="RemoveContainer for \"20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc\"" Oct 2 20:29:39.910058 env[1045]: time="2023-10-02T20:29:39.902888125Z" level=info msg="RemoveContainer for \"20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc\"" Oct 2 20:29:39.910648 env[1045]: time="2023-10-02T20:29:39.910554109Z" level=error msg="RemoveContainer for \"20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc\" failed" error="failed to set removing state for container \"20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc\": container is already in removing state" Oct 2 20:29:39.914377 kubelet[1967]: E1002 20:29:39.912123 1967 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc\": container is already in removing state" containerID="20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc" Oct 2 20:29:39.914377 kubelet[1967]: E1002 20:29:39.912249 1967 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc": container is already in removing state; Skipping pod "cilium-4sbd5_kube-system(a0f98ac2-4089-4400-9c4b-ea27ff172a68)" Oct 2 20:29:39.916803 kubelet[1967]: E1002 20:29:39.916765 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-4sbd5_kube-system(a0f98ac2-4089-4400-9c4b-ea27ff172a68)\"" pod="kube-system/cilium-4sbd5" podUID=a0f98ac2-4089-4400-9c4b-ea27ff172a68 Oct 2 20:29:39.922841 env[1045]: time="2023-10-02T20:29:39.922767892Z" level=info msg="RemoveContainer for \"20107467026d11a1e88a6044532cde454158e3b90c7410deb066484c320eb3bc\" returns successfully" Oct 2 20:29:40.659202 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff-rootfs.mount: Deactivated successfully. Oct 2 20:29:42.797508 kubelet[1967]: E1002 20:29:42.797463 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:29:42.862014 kubelet[1967]: W1002 20:29:42.861952 1967 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poda0f98ac2_4089_4400_9c4b_ea27ff172a68.slice/cri-containerd-ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff.scope WatchSource:0}: task ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff not found: not found Oct 2 20:29:44.017000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:44.021111 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:29:44.021257 kernel: audit: type=1400 audit(1696278584.017:1404): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:44.017000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:44.017000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000e6e5e0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:29:44.045248 kernel: audit: type=1400 audit(1696278584.017:1405): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:44.045372 kernel: audit: type=1300 audit(1696278584.017:1405): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000e6e5e0 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:29:44.017000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:29:44.020000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:44.057428 kernel: audit: type=1327 audit(1696278584.017:1405): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:29:44.057552 kernel: audit: type=1400 audit(1696278584.020:1406): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:44.057579 kernel: audit: type=1300 audit(1696278584.020:1406): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000e6ea20 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:29:44.020000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000e6ea20 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:29:44.020000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:29:44.070348 kernel: audit: type=1327 audit(1696278584.020:1406): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:29:44.017000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d29340 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:29:44.077433 kernel: audit: type=1300 audit(1696278584.017:1404): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d29340 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:29:44.017000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:29:44.033000 audit[1848]: AVC avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:44.088434 kernel: audit: type=1327 audit(1696278584.017:1404): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:29:44.088549 kernel: audit: type=1400 audit(1696278584.033:1407): avc: denied { watch } for pid=1848 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=525360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:29:44.033000 audit[1848]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e6eb60 a2=fc6 a3=0 items=0 ppid=1669 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c97,c750 key=(null) Oct 2 20:29:44.033000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:29:47.799561 kubelet[1967]: E1002 20:29:47.799489 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:29:50.630762 kubelet[1967]: E1002 20:29:50.630713 1967 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-4sbd5_kube-system(a0f98ac2-4089-4400-9c4b-ea27ff172a68)\"" pod="kube-system/cilium-4sbd5" podUID=a0f98ac2-4089-4400-9c4b-ea27ff172a68 Oct 2 20:29:52.333780 env[1045]: time="2023-10-02T20:29:52.333632204Z" level=info msg="StopPodSandbox for \"a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d\"" Oct 2 20:29:52.333780 env[1045]: time="2023-10-02T20:29:52.333717516Z" level=info msg="Container to stop \"ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:29:52.339158 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d-shm.mount: Deactivated successfully. Oct 2 20:29:52.349000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:29:52.349212 systemd[1]: cri-containerd-a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d.scope: Deactivated successfully. Oct 2 20:29:52.351463 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:29:52.351596 kernel: audit: type=1334 audit(1696278592.349:1408): prog-id=131 op=UNLOAD Oct 2 20:29:52.355000 audit: BPF prog-id=134 op=UNLOAD Oct 2 20:29:52.358390 kernel: audit: type=1334 audit(1696278592.355:1409): prog-id=134 op=UNLOAD Oct 2 20:29:52.381920 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d-rootfs.mount: Deactivated successfully. Oct 2 20:29:52.393748 env[1045]: time="2023-10-02T20:29:52.393679258Z" level=info msg="shim disconnected" id=a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d Oct 2 20:29:52.393748 env[1045]: time="2023-10-02T20:29:52.393743179Z" level=warning msg="cleaning up after shim disconnected" id=a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d namespace=k8s.io Oct 2 20:29:52.393748 env[1045]: time="2023-10-02T20:29:52.393755372Z" level=info msg="cleaning up dead shim" Oct 2 20:29:52.402384 env[1045]: time="2023-10-02T20:29:52.402339544Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:29:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3226 runtime=io.containerd.runc.v2\n" Oct 2 20:29:52.402844 env[1045]: time="2023-10-02T20:29:52.402816247Z" level=info msg="TearDown network for sandbox \"a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d\" successfully" Oct 2 20:29:52.402898 env[1045]: time="2023-10-02T20:29:52.402845051Z" level=info msg="StopPodSandbox for \"a9a35d118858bbe463298b1d039f19ac17316601325ddee51718e1ef2b2ef35d\" returns successfully" Oct 2 20:29:52.460375 kubelet[1967]: I1002 20:29:52.459188 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/a0f98ac2-4089-4400-9c4b-ea27ff172a68-hubble-tls\") pod \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " Oct 2 20:29:52.460375 kubelet[1967]: I1002 20:29:52.459277 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/a0f98ac2-4089-4400-9c4b-ea27ff172a68-clustermesh-secrets\") pod \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " Oct 2 20:29:52.460375 kubelet[1967]: I1002 20:29:52.459366 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cni-path\") pod \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " Oct 2 20:29:52.460375 kubelet[1967]: I1002 20:29:52.459425 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cilium-cgroup\") pod \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " Oct 2 20:29:52.460375 kubelet[1967]: I1002 20:29:52.459481 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-xtables-lock\") pod \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " Oct 2 20:29:52.460375 kubelet[1967]: I1002 20:29:52.459529 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-lib-modules\") pod \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " Oct 2 20:29:52.461503 kubelet[1967]: I1002 20:29:52.459578 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-etc-cni-netd\") pod \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " Oct 2 20:29:52.461503 kubelet[1967]: I1002 20:29:52.459627 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-bpf-maps\") pod \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " Oct 2 20:29:52.461503 kubelet[1967]: I1002 20:29:52.459706 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cilium-ipsec-secrets\") pod \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " Oct 2 20:29:52.461503 kubelet[1967]: I1002 20:29:52.459770 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cilium-config-path\") pod \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " Oct 2 20:29:52.461503 kubelet[1967]: I1002 20:29:52.459821 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-host-proc-sys-net\") pod \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " Oct 2 20:29:52.461503 kubelet[1967]: I1002 20:29:52.459871 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-hostproc\") pod \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " Oct 2 20:29:52.461904 kubelet[1967]: I1002 20:29:52.459955 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-f24p8\" (UniqueName: \"kubernetes.io/projected/a0f98ac2-4089-4400-9c4b-ea27ff172a68-kube-api-access-f24p8\") pod \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " Oct 2 20:29:52.461904 kubelet[1967]: I1002 20:29:52.460012 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-host-proc-sys-kernel\") pod \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " Oct 2 20:29:52.461904 kubelet[1967]: I1002 20:29:52.460062 1967 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cilium-run\") pod \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\" (UID: \"a0f98ac2-4089-4400-9c4b-ea27ff172a68\") " Oct 2 20:29:52.461904 kubelet[1967]: I1002 20:29:52.460160 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "a0f98ac2-4089-4400-9c4b-ea27ff172a68" (UID: "a0f98ac2-4089-4400-9c4b-ea27ff172a68"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:29:52.461904 kubelet[1967]: I1002 20:29:52.460394 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "a0f98ac2-4089-4400-9c4b-ea27ff172a68" (UID: "a0f98ac2-4089-4400-9c4b-ea27ff172a68"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:29:52.465340 kubelet[1967]: I1002 20:29:52.464577 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/a0f98ac2-4089-4400-9c4b-ea27ff172a68-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "a0f98ac2-4089-4400-9c4b-ea27ff172a68" (UID: "a0f98ac2-4089-4400-9c4b-ea27ff172a68"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:29:52.465340 kubelet[1967]: I1002 20:29:52.464630 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cni-path" (OuterVolumeSpecName: "cni-path") pod "a0f98ac2-4089-4400-9c4b-ea27ff172a68" (UID: "a0f98ac2-4089-4400-9c4b-ea27ff172a68"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:29:52.465340 kubelet[1967]: I1002 20:29:52.464650 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "a0f98ac2-4089-4400-9c4b-ea27ff172a68" (UID: "a0f98ac2-4089-4400-9c4b-ea27ff172a68"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:29:52.465340 kubelet[1967]: I1002 20:29:52.464668 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "a0f98ac2-4089-4400-9c4b-ea27ff172a68" (UID: "a0f98ac2-4089-4400-9c4b-ea27ff172a68"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:29:52.465340 kubelet[1967]: I1002 20:29:52.464687 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "a0f98ac2-4089-4400-9c4b-ea27ff172a68" (UID: "a0f98ac2-4089-4400-9c4b-ea27ff172a68"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:29:52.465575 kubelet[1967]: I1002 20:29:52.464705 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "a0f98ac2-4089-4400-9c4b-ea27ff172a68" (UID: "a0f98ac2-4089-4400-9c4b-ea27ff172a68"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:29:52.465575 kubelet[1967]: I1002 20:29:52.464724 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "a0f98ac2-4089-4400-9c4b-ea27ff172a68" (UID: "a0f98ac2-4089-4400-9c4b-ea27ff172a68"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:29:52.465906 systemd[1]: var-lib-kubelet-pods-a0f98ac2\x2d4089\x2d4400\x2d9c4b\x2dea27ff172a68-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:29:52.469724 kubelet[1967]: I1002 20:29:52.469699 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "a0f98ac2-4089-4400-9c4b-ea27ff172a68" (UID: "a0f98ac2-4089-4400-9c4b-ea27ff172a68"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:29:52.469970 kubelet[1967]: W1002 20:29:52.469943 1967 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/a0f98ac2-4089-4400-9c4b-ea27ff172a68/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:29:52.470658 systemd[1]: var-lib-kubelet-pods-a0f98ac2\x2d4089\x2d4400\x2d9c4b\x2dea27ff172a68-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:29:52.472515 kubelet[1967]: I1002 20:29:52.472491 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "a0f98ac2-4089-4400-9c4b-ea27ff172a68" (UID: "a0f98ac2-4089-4400-9c4b-ea27ff172a68"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:29:52.477688 kubelet[1967]: I1002 20:29:52.477653 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/a0f98ac2-4089-4400-9c4b-ea27ff172a68-kube-api-access-f24p8" (OuterVolumeSpecName: "kube-api-access-f24p8") pod "a0f98ac2-4089-4400-9c4b-ea27ff172a68" (UID: "a0f98ac2-4089-4400-9c4b-ea27ff172a68"). InnerVolumeSpecName "kube-api-access-f24p8". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:29:52.478200 kubelet[1967]: I1002 20:29:52.478059 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "a0f98ac2-4089-4400-9c4b-ea27ff172a68" (UID: "a0f98ac2-4089-4400-9c4b-ea27ff172a68"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:29:52.478279 kubelet[1967]: I1002 20:29:52.478088 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-hostproc" (OuterVolumeSpecName: "hostproc") pod "a0f98ac2-4089-4400-9c4b-ea27ff172a68" (UID: "a0f98ac2-4089-4400-9c4b-ea27ff172a68"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:29:52.480255 systemd[1]: var-lib-kubelet-pods-a0f98ac2\x2d4089\x2d4400\x2d9c4b\x2dea27ff172a68-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2df24p8.mount: Deactivated successfully. Oct 2 20:29:52.484689 kubelet[1967]: I1002 20:29:52.484633 1967 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/a0f98ac2-4089-4400-9c4b-ea27ff172a68-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "a0f98ac2-4089-4400-9c4b-ea27ff172a68" (UID: "a0f98ac2-4089-4400-9c4b-ea27ff172a68"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:29:52.543555 sshd[2998]: pam_unix(sshd:session): session closed for user core Oct 2 20:29:52.546000 audit[2998]: USER_END pid=2998 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:29:52.561187 kubelet[1967]: I1002 20:29:52.561120 1967 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-host-proc-sys-net\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:29:52.561187 kubelet[1967]: I1002 20:29:52.561179 1967 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-hostproc\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:29:52.561503 kernel: audit: type=1106 audit(1696278592.546:1410): pid=2998 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:29:52.561590 kubelet[1967]: I1002 20:29:52.561214 1967 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-f24p8\" (UniqueName: \"kubernetes.io/projected/a0f98ac2-4089-4400-9c4b-ea27ff172a68-kube-api-access-f24p8\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:29:52.561590 kubelet[1967]: I1002 20:29:52.561249 1967 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-host-proc-sys-kernel\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:29:52.561590 kubelet[1967]: I1002 20:29:52.561280 1967 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cilium-run\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:29:52.561590 kubelet[1967]: I1002 20:29:52.561352 1967 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/a0f98ac2-4089-4400-9c4b-ea27ff172a68-hubble-tls\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:29:52.561590 kubelet[1967]: I1002 20:29:52.561386 1967 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/a0f98ac2-4089-4400-9c4b-ea27ff172a68-clustermesh-secrets\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:29:52.561590 kubelet[1967]: I1002 20:29:52.561438 1967 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cni-path\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:29:52.561590 kubelet[1967]: I1002 20:29:52.561470 1967 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cilium-cgroup\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:29:52.562046 kubelet[1967]: I1002 20:29:52.561500 1967 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-xtables-lock\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:29:52.562046 kubelet[1967]: I1002 20:29:52.561529 1967 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-lib-modules\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:29:52.562046 kubelet[1967]: I1002 20:29:52.561559 1967 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-etc-cni-netd\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:29:52.562046 kubelet[1967]: I1002 20:29:52.561588 1967 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/a0f98ac2-4089-4400-9c4b-ea27ff172a68-bpf-maps\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:29:52.562046 kubelet[1967]: I1002 20:29:52.561618 1967 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cilium-ipsec-secrets\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:29:52.562046 kubelet[1967]: I1002 20:29:52.561649 1967 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/a0f98ac2-4089-4400-9c4b-ea27ff172a68-cilium-config-path\") on node \"ci-3510-3-0-7-ba0a608fa7.novalocal\" DevicePath \"\"" Oct 2 20:29:52.546000 audit[2998]: CRED_DISP pid=2998 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:29:52.563066 systemd-logind[1040]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:29:52.566451 systemd[1]: sshd@29-172.24.4.85:22-172.24.4.1:45650.service: Deactivated successfully. Oct 2 20:29:52.567998 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:29:52.568342 systemd[1]: session-30.scope: Consumed 1.859s CPU time. Oct 2 20:29:52.571019 systemd-logind[1040]: Removed session 30. Oct 2 20:29:52.562000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.24.4.85:22-172.24.4.1:45650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:29:52.583173 kernel: audit: type=1104 audit(1696278592.546:1411): pid=2998 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Oct 2 20:29:52.583292 kernel: audit: type=1131 audit(1696278592.562:1412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.24.4.85:22-172.24.4.1:45650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:29:52.642496 systemd[1]: Removed slice kubepods-burstable-poda0f98ac2_4089_4400_9c4b_ea27ff172a68.slice. Oct 2 20:29:52.800895 kubelet[1967]: E1002 20:29:52.800854 1967 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:29:52.943399 kubelet[1967]: I1002 20:29:52.943217 1967 scope.go:115] "RemoveContainer" containerID="ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff" Oct 2 20:29:52.949401 env[1045]: time="2023-10-02T20:29:52.949223602Z" level=info msg="RemoveContainer for \"ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff\"" Oct 2 20:29:52.966212 env[1045]: time="2023-10-02T20:29:52.962854729Z" level=info msg="RemoveContainer for \"ee2d21c4e9b771fddd89c9ccf0a039f602024e2681e5aa85710231e876db80ff\" returns successfully" Oct 2 20:29:53.340289 systemd[1]: var-lib-kubelet-pods-a0f98ac2\x2d4089\x2d4400\x2d9c4b\x2dea27ff172a68-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:29:54.636086 kubelet[1967]: I1002 20:29:54.635605 1967 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=a0f98ac2-4089-4400-9c4b-ea27ff172a68 path="/var/lib/kubelet/pods/a0f98ac2-4089-4400-9c4b-ea27ff172a68/volumes"