Oct 2 19:10:48.085777 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:10:48.085812 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:10:48.085822 kernel: BIOS-provided physical RAM map: Oct 2 19:10:48.085829 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 19:10:48.085835 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 19:10:48.085842 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 19:10:48.085851 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdcfff] usable Oct 2 19:10:48.085858 kernel: BIOS-e820: [mem 0x000000009cfdd000-0x000000009cffffff] reserved Oct 2 19:10:48.085866 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Oct 2 19:10:48.085873 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 19:10:48.085880 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Oct 2 19:10:48.085887 kernel: NX (Execute Disable) protection: active Oct 2 19:10:48.085894 kernel: SMBIOS 2.8 present. Oct 2 19:10:48.085901 kernel: DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Oct 2 19:10:48.085911 kernel: Hypervisor detected: KVM Oct 2 19:10:48.085919 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:10:48.085926 kernel: kvm-clock: cpu 0, msr 7cf8a001, primary cpu clock Oct 2 19:10:48.085934 kernel: kvm-clock: using sched offset of 3868875833 cycles Oct 2 19:10:48.085942 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:10:48.085950 kernel: tsc: Detected 2794.748 MHz processor Oct 2 19:10:48.085958 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:10:48.085967 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:10:48.085976 kernel: last_pfn = 0x9cfdd max_arch_pfn = 0x400000000 Oct 2 19:10:48.085986 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:10:48.085993 kernel: Using GB pages for direct mapping Oct 2 19:10:48.086001 kernel: ACPI: Early table checksum verification disabled Oct 2 19:10:48.086009 kernel: ACPI: RSDP 0x00000000000F59C0 000014 (v00 BOCHS ) Oct 2 19:10:48.086017 kernel: ACPI: RSDT 0x000000009CFE1BDD 000034 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:10:48.086026 kernel: ACPI: FACP 0x000000009CFE1A79 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:10:48.086034 kernel: ACPI: DSDT 0x000000009CFE0040 001A39 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:10:48.086042 kernel: ACPI: FACS 0x000000009CFE0000 000040 Oct 2 19:10:48.086050 kernel: ACPI: APIC 0x000000009CFE1AED 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:10:48.086060 kernel: ACPI: HPET 0x000000009CFE1B7D 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:10:48.086069 kernel: ACPI: WAET 0x000000009CFE1BB5 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Oct 2 19:10:48.086077 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe1a79-0x9cfe1aec] Oct 2 19:10:48.086085 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe1a78] Oct 2 19:10:48.086093 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Oct 2 19:10:48.086100 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe1aed-0x9cfe1b7c] Oct 2 19:10:48.086108 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe1b7d-0x9cfe1bb4] Oct 2 19:10:48.086116 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe1bb5-0x9cfe1bdc] Oct 2 19:10:48.086129 kernel: No NUMA configuration found Oct 2 19:10:48.086138 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdcfff] Oct 2 19:10:48.086147 kernel: NODE_DATA(0) allocated [mem 0x9cfd7000-0x9cfdcfff] Oct 2 19:10:48.086156 kernel: Zone ranges: Oct 2 19:10:48.086165 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:10:48.086173 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdcfff] Oct 2 19:10:48.086184 kernel: Normal empty Oct 2 19:10:48.086193 kernel: Movable zone start for each node Oct 2 19:10:48.086201 kernel: Early memory node ranges Oct 2 19:10:48.086245 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 19:10:48.086383 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdcfff] Oct 2 19:10:48.086395 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdcfff] Oct 2 19:10:48.086404 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:10:48.086413 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 19:10:48.086422 kernel: On node 0, zone DMA32: 12323 pages in unavailable ranges Oct 2 19:10:48.086434 kernel: ACPI: PM-Timer IO Port: 0x608 Oct 2 19:10:48.086443 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:10:48.086452 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:10:48.086461 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Oct 2 19:10:48.086470 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:10:48.086478 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:10:48.086492 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:10:48.086516 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:10:48.086526 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:10:48.086537 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 19:10:48.086546 kernel: TSC deadline timer available Oct 2 19:10:48.086554 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Oct 2 19:10:48.086563 kernel: kvm-guest: KVM setup pv remote TLB flush Oct 2 19:10:48.086572 kernel: kvm-guest: setup PV sched yield Oct 2 19:10:48.086580 kernel: [mem 0x9d000000-0xfeffbfff] available for PCI devices Oct 2 19:10:48.086589 kernel: Booting paravirtualized kernel on KVM Oct 2 19:10:48.086598 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:10:48.086608 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Oct 2 19:10:48.086618 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u524288 Oct 2 19:10:48.086627 kernel: pcpu-alloc: s185624 r8192 d31464 u524288 alloc=1*2097152 Oct 2 19:10:48.086636 kernel: pcpu-alloc: [0] 0 1 2 3 Oct 2 19:10:48.086644 kernel: kvm-guest: setup async PF for cpu 0 Oct 2 19:10:48.086653 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Oct 2 19:10:48.086662 kernel: kvm-guest: PV spinlocks enabled Oct 2 19:10:48.086671 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:10:48.086679 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632733 Oct 2 19:10:48.086689 kernel: Policy zone: DMA32 Oct 2 19:10:48.086708 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:10:48.086723 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:10:48.086732 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:10:48.086740 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:10:48.086749 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:10:48.086758 kernel: Memory: 2438768K/2571756K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 132728K reserved, 0K cma-reserved) Oct 2 19:10:48.086767 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Oct 2 19:10:48.086776 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:10:48.086795 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:10:48.086817 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:10:48.086828 kernel: rcu: RCU event tracing is enabled. Oct 2 19:10:48.086837 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Oct 2 19:10:48.086845 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:10:48.086854 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:10:48.086862 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:10:48.086870 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Oct 2 19:10:48.086878 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Oct 2 19:10:48.086889 kernel: random: crng init done Oct 2 19:10:48.086897 kernel: Console: colour VGA+ 80x25 Oct 2 19:10:48.086910 kernel: printk: console [ttyS0] enabled Oct 2 19:10:48.086926 kernel: ACPI: Core revision 20210730 Oct 2 19:10:48.086935 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Oct 2 19:10:48.086944 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:10:48.086953 kernel: x2apic enabled Oct 2 19:10:48.086962 kernel: Switched APIC routing to physical x2apic. Oct 2 19:10:48.086970 kernel: kvm-guest: setup PV IPIs Oct 2 19:10:48.086978 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Oct 2 19:10:48.087002 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Oct 2 19:10:48.087012 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Oct 2 19:10:48.087021 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Oct 2 19:10:48.087029 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Oct 2 19:10:48.087038 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Oct 2 19:10:48.087047 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:10:48.087056 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:10:48.087074 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:10:48.087086 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:10:48.087103 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Oct 2 19:10:48.087113 kernel: RETBleed: Mitigation: untrained return thunk Oct 2 19:10:48.087122 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Oct 2 19:10:48.087133 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Oct 2 19:10:48.087156 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:10:48.087167 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:10:48.087176 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:10:48.087185 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:10:48.087194 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Oct 2 19:10:48.087228 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:10:48.087238 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:10:48.087248 kernel: LSM: Security Framework initializing Oct 2 19:10:48.087257 kernel: SELinux: Initializing. Oct 2 19:10:48.087266 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:10:48.087277 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 19:10:48.087297 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Oct 2 19:10:48.087310 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Oct 2 19:10:48.087319 kernel: ... version: 0 Oct 2 19:10:48.087327 kernel: ... bit width: 48 Oct 2 19:10:48.087336 kernel: ... generic registers: 6 Oct 2 19:10:48.087344 kernel: ... value mask: 0000ffffffffffff Oct 2 19:10:48.087353 kernel: ... max period: 00007fffffffffff Oct 2 19:10:48.087361 kernel: ... fixed-purpose events: 0 Oct 2 19:10:48.087370 kernel: ... event mask: 000000000000003f Oct 2 19:10:48.087378 kernel: signal: max sigframe size: 1776 Oct 2 19:10:48.087480 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:10:48.087490 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:10:48.087498 kernel: x86: Booting SMP configuration: Oct 2 19:10:48.087523 kernel: .... node #0, CPUs: #1 Oct 2 19:10:48.087533 kernel: kvm-clock: cpu 1, msr 7cf8a041, secondary cpu clock Oct 2 19:10:48.087542 kernel: kvm-guest: setup async PF for cpu 1 Oct 2 19:10:48.087551 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Oct 2 19:10:48.087561 kernel: #2 Oct 2 19:10:48.087570 kernel: kvm-clock: cpu 2, msr 7cf8a081, secondary cpu clock Oct 2 19:10:48.087580 kernel: kvm-guest: setup async PF for cpu 2 Oct 2 19:10:48.087604 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Oct 2 19:10:48.087614 kernel: #3 Oct 2 19:10:48.087624 kernel: kvm-clock: cpu 3, msr 7cf8a0c1, secondary cpu clock Oct 2 19:10:48.087633 kernel: kvm-guest: setup async PF for cpu 3 Oct 2 19:10:48.087642 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Oct 2 19:10:48.087651 kernel: smp: Brought up 1 node, 4 CPUs Oct 2 19:10:48.087661 kernel: smpboot: Max logical packages: 1 Oct 2 19:10:48.087670 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Oct 2 19:10:48.087679 kernel: devtmpfs: initialized Oct 2 19:10:48.087691 kernel: x86/mm: Memory block size: 128MB Oct 2 19:10:48.087701 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:10:48.087710 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Oct 2 19:10:48.087731 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:10:48.087741 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:10:48.087751 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:10:48.087760 kernel: audit: type=2000 audit(1696273847.271:1): state=initialized audit_enabled=0 res=1 Oct 2 19:10:48.087770 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:10:48.087779 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:10:48.087799 kernel: cpuidle: using governor menu Oct 2 19:10:48.093105 kernel: ACPI: bus type PCI registered Oct 2 19:10:48.093142 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:10:48.093153 kernel: dca service started, version 1.12.1 Oct 2 19:10:48.093163 kernel: PCI: Using configuration type 1 for base access Oct 2 19:10:48.093173 kernel: PCI: Using configuration type 1 for extended access Oct 2 19:10:48.093182 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:10:48.093192 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:10:48.093201 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:10:48.093228 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:10:48.093238 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:10:48.093247 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:10:48.093257 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:10:48.093266 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:10:48.093276 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:10:48.093285 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:10:48.093295 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:10:48.093304 kernel: ACPI: Interpreter enabled Oct 2 19:10:48.093316 kernel: ACPI: PM: (supports S0 S3 S5) Oct 2 19:10:48.093326 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:10:48.093335 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:10:48.093345 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Oct 2 19:10:48.093355 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:10:48.093540 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:10:48.093558 kernel: acpiphp: Slot [3] registered Oct 2 19:10:48.093567 kernel: acpiphp: Slot [4] registered Oct 2 19:10:48.093580 kernel: acpiphp: Slot [5] registered Oct 2 19:10:48.093589 kernel: acpiphp: Slot [6] registered Oct 2 19:10:48.093599 kernel: acpiphp: Slot [7] registered Oct 2 19:10:48.093608 kernel: acpiphp: Slot [8] registered Oct 2 19:10:48.093617 kernel: acpiphp: Slot [9] registered Oct 2 19:10:48.093627 kernel: acpiphp: Slot [10] registered Oct 2 19:10:48.093636 kernel: acpiphp: Slot [11] registered Oct 2 19:10:48.093646 kernel: acpiphp: Slot [12] registered Oct 2 19:10:48.093655 kernel: acpiphp: Slot [13] registered Oct 2 19:10:48.093664 kernel: acpiphp: Slot [14] registered Oct 2 19:10:48.093676 kernel: acpiphp: Slot [15] registered Oct 2 19:10:48.093685 kernel: acpiphp: Slot [16] registered Oct 2 19:10:48.093694 kernel: acpiphp: Slot [17] registered Oct 2 19:10:48.093704 kernel: acpiphp: Slot [18] registered Oct 2 19:10:48.093713 kernel: acpiphp: Slot [19] registered Oct 2 19:10:48.093722 kernel: acpiphp: Slot [20] registered Oct 2 19:10:48.093731 kernel: acpiphp: Slot [21] registered Oct 2 19:10:48.093741 kernel: acpiphp: Slot [22] registered Oct 2 19:10:48.093750 kernel: acpiphp: Slot [23] registered Oct 2 19:10:48.093761 kernel: acpiphp: Slot [24] registered Oct 2 19:10:48.093770 kernel: acpiphp: Slot [25] registered Oct 2 19:10:48.093779 kernel: acpiphp: Slot [26] registered Oct 2 19:10:48.093797 kernel: acpiphp: Slot [27] registered Oct 2 19:10:48.093807 kernel: acpiphp: Slot [28] registered Oct 2 19:10:48.093816 kernel: acpiphp: Slot [29] registered Oct 2 19:10:48.093826 kernel: acpiphp: Slot [30] registered Oct 2 19:10:48.093836 kernel: acpiphp: Slot [31] registered Oct 2 19:10:48.093845 kernel: PCI host bridge to bus 0000:00 Oct 2 19:10:48.093954 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:10:48.094044 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:10:48.094128 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:10:48.094230 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xfebfffff window] Oct 2 19:10:48.094357 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Oct 2 19:10:48.094454 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:10:48.094582 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:10:48.094707 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:10:48.094822 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Oct 2 19:10:48.094919 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc0c0-0xc0cf] Oct 2 19:10:48.095014 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Oct 2 19:10:48.095108 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Oct 2 19:10:48.095204 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Oct 2 19:10:48.095324 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Oct 2 19:10:48.095433 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Oct 2 19:10:48.095529 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Oct 2 19:10:48.095623 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Oct 2 19:10:48.095724 kernel: pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 Oct 2 19:10:48.095830 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Oct 2 19:10:48.095924 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Oct 2 19:10:48.096023 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Oct 2 19:10:48.096117 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:10:48.096250 kernel: pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 Oct 2 19:10:48.096354 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc09f] Oct 2 19:10:48.096455 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Oct 2 19:10:48.096559 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Oct 2 19:10:48.096671 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Oct 2 19:10:48.096773 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Oct 2 19:10:48.096882 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Oct 2 19:10:48.096979 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Oct 2 19:10:48.097085 kernel: pci 0000:00:05.0: [1af4:1000] type 00 class 0x020000 Oct 2 19:10:48.097183 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0a0-0xc0bf] Oct 2 19:10:48.097298 kernel: pci 0000:00:05.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Oct 2 19:10:48.097393 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Oct 2 19:10:48.097495 kernel: pci 0000:00:05.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Oct 2 19:10:48.097509 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:10:48.097518 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:10:48.097528 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:10:48.097538 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:10:48.097547 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:10:48.097557 kernel: iommu: Default domain type: Translated Oct 2 19:10:48.097566 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:10:48.097661 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Oct 2 19:10:48.097760 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:10:48.097880 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Oct 2 19:10:48.097898 kernel: vgaarb: loaded Oct 2 19:10:48.097907 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:10:48.097916 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:10:48.097925 kernel: PTP clock support registered Oct 2 19:10:48.097940 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:10:48.097950 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:10:48.097963 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 19:10:48.097971 kernel: e820: reserve RAM buffer [mem 0x9cfdd000-0x9fffffff] Oct 2 19:10:48.097980 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Oct 2 19:10:48.097988 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Oct 2 19:10:48.097997 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:10:48.098005 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:10:48.098014 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:10:48.098023 kernel: pnp: PnP ACPI init Oct 2 19:10:48.098164 kernel: pnp 00:02: [dma 2] Oct 2 19:10:48.098188 kernel: pnp: PnP ACPI: found 6 devices Oct 2 19:10:48.098201 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:10:48.098222 kernel: NET: Registered PF_INET protocol family Oct 2 19:10:48.098232 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:10:48.098240 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 19:10:48.098249 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:10:48.098258 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:10:48.098266 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 19:10:48.098278 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 19:10:48.098287 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:10:48.098296 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 19:10:48.098304 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:10:48.098312 kernel: NET: Registered PF_XDP protocol family Oct 2 19:10:48.098402 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:10:48.098475 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:10:48.098544 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:10:48.098613 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xfebfffff window] Oct 2 19:10:48.098685 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Oct 2 19:10:48.098803 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Oct 2 19:10:48.098908 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:10:48.099005 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:10:48.099019 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:10:48.099028 kernel: Initialise system trusted keyrings Oct 2 19:10:48.099037 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 19:10:48.099047 kernel: Key type asymmetric registered Oct 2 19:10:48.099058 kernel: Asymmetric key parser 'x509' registered Oct 2 19:10:48.099067 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:10:48.099076 kernel: io scheduler mq-deadline registered Oct 2 19:10:48.099085 kernel: io scheduler kyber registered Oct 2 19:10:48.099094 kernel: io scheduler bfq registered Oct 2 19:10:48.099103 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:10:48.099113 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Oct 2 19:10:48.099122 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 10 Oct 2 19:10:48.099132 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Oct 2 19:10:48.099143 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:10:48.099152 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:10:48.099162 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:10:48.099172 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:10:48.099181 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:10:48.099316 kernel: rtc_cmos 00:05: RTC can wake from S4 Oct 2 19:10:48.099334 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:10:48.099418 kernel: rtc_cmos 00:05: registered as rtc0 Oct 2 19:10:48.099525 kernel: rtc_cmos 00:05: setting system clock to 2023-10-02T19:10:47 UTC (1696273847) Oct 2 19:10:48.099630 kernel: rtc_cmos 00:05: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Oct 2 19:10:48.099647 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:10:48.099657 kernel: Segment Routing with IPv6 Oct 2 19:10:48.099666 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:10:48.099676 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:10:48.099685 kernel: Key type dns_resolver registered Oct 2 19:10:48.099695 kernel: IPI shorthand broadcast: enabled Oct 2 19:10:48.099705 kernel: sched_clock: Marking stable (516161099, 96237921)->(776169485, -163770465) Oct 2 19:10:48.099718 kernel: registered taskstats version 1 Oct 2 19:10:48.099728 kernel: Loading compiled-in X.509 certificates Oct 2 19:10:48.099739 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:10:48.099754 kernel: Key type .fscrypt registered Oct 2 19:10:48.099764 kernel: Key type fscrypt-provisioning registered Oct 2 19:10:48.099774 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:10:48.099791 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:10:48.099801 kernel: ima: No architecture policies found Oct 2 19:10:48.099814 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:10:48.099823 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:10:48.099832 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:10:48.099841 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:10:48.099849 kernel: Run /init as init process Oct 2 19:10:48.099858 kernel: with arguments: Oct 2 19:10:48.099867 kernel: /init Oct 2 19:10:48.099876 kernel: with environment: Oct 2 19:10:48.099897 kernel: HOME=/ Oct 2 19:10:48.099908 kernel: TERM=linux Oct 2 19:10:48.099919 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:10:48.099934 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:10:48.099947 systemd[1]: Detected virtualization kvm. Oct 2 19:10:48.099958 systemd[1]: Detected architecture x86-64. Oct 2 19:10:48.099968 systemd[1]: Running in initrd. Oct 2 19:10:48.099979 systemd[1]: No hostname configured, using default hostname. Oct 2 19:10:48.100000 systemd[1]: Hostname set to . Oct 2 19:10:48.100012 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:10:48.100024 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:10:48.100034 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:10:48.100044 systemd[1]: Reached target cryptsetup.target. Oct 2 19:10:48.100055 systemd[1]: Reached target paths.target. Oct 2 19:10:48.100071 systemd[1]: Reached target slices.target. Oct 2 19:10:48.100084 systemd[1]: Reached target swap.target. Oct 2 19:10:48.100094 systemd[1]: Reached target timers.target. Oct 2 19:10:48.100116 systemd[1]: Listening on iscsid.socket. Oct 2 19:10:48.100129 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:10:48.100145 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:10:48.100156 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:10:48.100166 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:10:48.100184 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:10:48.100194 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:10:48.100206 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:10:48.100229 systemd[1]: Reached target sockets.target. Oct 2 19:10:48.100238 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:10:48.100247 systemd[1]: Finished network-cleanup.service. Oct 2 19:10:48.100256 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:10:48.100266 systemd[1]: Starting systemd-journald.service... Oct 2 19:10:48.100275 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:10:48.100287 systemd[1]: Starting systemd-resolved.service... Oct 2 19:10:48.100296 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:10:48.100305 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:10:48.100315 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:10:48.100324 kernel: audit: type=1130 audit(1696273848.084:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.100334 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:10:48.100348 systemd-journald[197]: Journal started Oct 2 19:10:48.100404 systemd-journald[197]: Runtime Journal (/run/log/journal/2f02491b662242ea8f2e1849f62bff97) is 6.0M, max 48.5M, 42.5M free. Oct 2 19:10:48.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.079424 systemd-modules-load[198]: Inserted module 'overlay' Oct 2 19:10:48.099804 systemd-resolved[199]: Positive Trust Anchors: Oct 2 19:10:48.118255 systemd[1]: Started systemd-journald.service. Oct 2 19:10:48.099812 systemd-resolved[199]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:10:48.099838 systemd-resolved[199]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:10:48.101965 systemd-resolved[199]: Defaulting to hostname 'linux'. Oct 2 19:10:48.131234 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:10:48.136198 systemd[1]: Started systemd-resolved.service. Oct 2 19:10:48.146494 kernel: audit: type=1130 audit(1696273848.135:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.146531 kernel: audit: type=1130 audit(1696273848.143:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.143981 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:10:48.150566 kernel: Bridge firewalling registered Oct 2 19:10:48.150537 systemd-modules-load[198]: Inserted module 'br_netfilter' Oct 2 19:10:48.151000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.152388 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:10:48.156810 systemd[1]: Reached target nss-lookup.target. Oct 2 19:10:48.160909 kernel: audit: type=1130 audit(1696273848.151:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.160935 kernel: audit: type=1130 audit(1696273848.154:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.160696 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:10:48.198275 kernel: SCSI subsystem initialized Oct 2 19:10:48.202390 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:10:48.207549 kernel: audit: type=1130 audit(1696273848.203:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.203000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.205684 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:10:48.221561 dracut-cmdline[215]: dracut-dracut-053 Oct 2 19:10:48.226527 dracut-cmdline[215]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:10:48.231947 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:10:48.231985 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:10:48.232000 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:10:48.239805 systemd-modules-load[198]: Inserted module 'dm_multipath' Oct 2 19:10:48.254244 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:10:48.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.260293 kernel: audit: type=1130 audit(1696273848.254:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.260608 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:10:48.270671 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:10:48.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.288957 kernel: audit: type=1130 audit(1696273848.275:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.381762 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:10:48.419825 kernel: iscsi: registered transport (tcp) Oct 2 19:10:48.465909 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:10:48.466008 kernel: QLogic iSCSI HBA Driver Oct 2 19:10:48.555614 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:10:48.562333 kernel: audit: type=1130 audit(1696273848.557:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:48.563485 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:10:48.621810 kernel: raid6: avx2x4 gen() 26755 MB/s Oct 2 19:10:48.639041 kernel: raid6: avx2x4 xor() 6385 MB/s Oct 2 19:10:48.657164 kernel: raid6: avx2x2 gen() 21972 MB/s Oct 2 19:10:48.675847 kernel: raid6: avx2x2 xor() 14430 MB/s Oct 2 19:10:48.700906 kernel: raid6: avx2x1 gen() 14815 MB/s Oct 2 19:10:48.728799 kernel: raid6: avx2x1 xor() 9568 MB/s Oct 2 19:10:48.754023 kernel: raid6: sse2x4 gen() 9405 MB/s Oct 2 19:10:48.794287 kernel: raid6: sse2x4 xor() 5334 MB/s Oct 2 19:10:48.814355 kernel: raid6: sse2x2 gen() 9430 MB/s Oct 2 19:10:48.833934 kernel: raid6: sse2x2 xor() 5978 MB/s Oct 2 19:10:48.850269 kernel: raid6: sse2x1 gen() 8203 MB/s Oct 2 19:10:48.875034 kernel: raid6: sse2x1 xor() 5152 MB/s Oct 2 19:10:48.875112 kernel: raid6: using algorithm avx2x4 gen() 26755 MB/s Oct 2 19:10:48.875125 kernel: raid6: .... xor() 6385 MB/s, rmw enabled Oct 2 19:10:48.875136 kernel: raid6: using avx2x2 recovery algorithm Oct 2 19:10:48.895293 kernel: xor: automatically using best checksumming function avx Oct 2 19:10:49.051236 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:10:49.078397 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:10:49.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:49.079000 audit: BPF prog-id=7 op=LOAD Oct 2 19:10:49.080000 audit: BPF prog-id=8 op=LOAD Oct 2 19:10:49.108065 systemd[1]: Starting systemd-udevd.service... Oct 2 19:10:49.139971 systemd-udevd[400]: Using default interface naming scheme 'v252'. Oct 2 19:10:49.144863 systemd[1]: Started systemd-udevd.service. Oct 2 19:10:49.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:49.163663 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:10:49.186223 dracut-pre-trigger[409]: rd.md=0: removing MD RAID activation Oct 2 19:10:49.235133 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:10:49.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:49.238805 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:10:49.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:49.286086 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:10:49.369394 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:10:49.387274 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:10:49.387366 kernel: AES CTR mode by8 optimization enabled Oct 2 19:10:49.387378 kernel: virtio_blk virtio1: [vda] 9289728 512-byte logical blocks (4.76 GB/4.43 GiB) Oct 2 19:10:49.411973 kernel: libata version 3.00 loaded. Oct 2 19:10:49.415429 kernel: ata_piix 0000:00:01.1: version 2.13 Oct 2 19:10:49.417519 kernel: scsi host0: ata_piix Oct 2 19:10:49.419249 kernel: scsi host1: ata_piix Oct 2 19:10:49.419447 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14 Oct 2 19:10:49.419474 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15 Oct 2 19:10:49.449871 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:10:49.574387 kernel: ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Oct 2 19:10:49.583882 kernel: scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Oct 2 19:10:49.695063 kernel: sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Oct 2 19:10:49.695770 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 19:10:49.695789 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (442) Oct 2 19:10:49.693939 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:10:49.704549 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:10:49.716387 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:10:49.724788 kernel: sr 1:0:0:0: Attached scsi CD-ROM sr0 Oct 2 19:10:49.724765 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:10:49.730428 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:10:49.742098 systemd[1]: Starting disk-uuid.service... Oct 2 19:10:49.787311 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:10:49.792833 kernel: GPT:disk_guids don't match. Oct 2 19:10:49.792923 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:10:49.792971 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:10:49.818352 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:10:50.884702 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Oct 2 19:10:50.886162 disk-uuid[514]: The operation has completed successfully. Oct 2 19:10:51.089184 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:10:51.091603 systemd[1]: Finished disk-uuid.service. Oct 2 19:10:51.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:51.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:51.135541 systemd[1]: Starting verity-setup.service... Oct 2 19:10:51.197961 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:10:51.455525 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:10:51.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:51.472158 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:10:51.477187 systemd[1]: Finished verity-setup.service. Oct 2 19:10:51.824056 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:10:51.822097 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:10:51.823052 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:10:51.826458 systemd[1]: Starting ignition-setup.service... Oct 2 19:10:51.832330 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:10:51.848656 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:10:51.848743 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:10:51.848757 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:10:51.870587 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:10:51.896503 systemd[1]: Finished ignition-setup.service. Oct 2 19:10:51.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:51.910780 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:10:51.984393 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:10:51.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:51.990164 systemd[1]: Starting systemd-networkd.service... Oct 2 19:10:51.989000 audit: BPF prog-id=9 op=LOAD Oct 2 19:10:52.047990 systemd-networkd[687]: lo: Link UP Oct 2 19:10:52.047997 systemd-networkd[687]: lo: Gained carrier Oct 2 19:10:52.048485 systemd-networkd[687]: Enumeration completed Oct 2 19:10:52.048611 systemd[1]: Started systemd-networkd.service. Oct 2 19:10:52.048715 systemd-networkd[687]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:10:52.059030 systemd-networkd[687]: eth0: Link UP Oct 2 19:10:52.059037 systemd-networkd[687]: eth0: Gained carrier Oct 2 19:10:52.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.077685 systemd[1]: Reached target network.target. Oct 2 19:10:52.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.079912 systemd[1]: Starting iscsiuio.service... Oct 2 19:10:52.087191 systemd[1]: Started iscsiuio.service. Oct 2 19:10:52.095223 systemd[1]: Starting iscsid.service... Oct 2 19:10:52.109884 iscsid[696]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:10:52.109884 iscsid[696]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 19:10:52.109884 iscsid[696]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:10:52.109884 iscsid[696]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:10:52.109884 iscsid[696]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:10:52.109884 iscsid[696]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:10:52.109884 iscsid[696]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:10:52.131050 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:10:52.131132 kernel: audit: type=1130 audit(1696273852.124:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.123357 systemd-networkd[687]: eth0: DHCPv4 address 10.0.0.65/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:10:52.124153 systemd[1]: Started iscsid.service. Oct 2 19:10:52.149311 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:10:52.174691 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:10:52.176643 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:10:52.187993 kernel: audit: type=1130 audit(1696273852.176:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.180154 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:10:52.181043 systemd[1]: Reached target remote-fs.target. Oct 2 19:10:52.183150 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:10:52.193287 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:10:52.198816 kernel: audit: type=1130 audit(1696273852.193:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.341840 ignition[607]: Ignition 2.14.0 Oct 2 19:10:52.342768 ignition[607]: Stage: fetch-offline Oct 2 19:10:52.342822 ignition[607]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:10:52.342833 ignition[607]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:10:52.342952 ignition[607]: parsed url from cmdline: "" Oct 2 19:10:52.342956 ignition[607]: no config URL provided Oct 2 19:10:52.342962 ignition[607]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:10:52.342969 ignition[607]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:10:52.342989 ignition[607]: op(1): [started] loading QEMU firmware config module Oct 2 19:10:52.342994 ignition[607]: op(1): executing: "modprobe" "qemu_fw_cfg" Oct 2 19:10:52.355779 ignition[607]: op(1): [finished] loading QEMU firmware config module Oct 2 19:10:52.392486 ignition[607]: parsing config with SHA512: a5d2b9922ae4b0c8ac826d8c55defd581aa78673a3871b287aef867087a01128cd067a01eacabe2f5c9b4040b4b7130cee7e7dded3772fcefe21da650f4c1f38 Oct 2 19:10:52.456628 unknown[607]: fetched base config from "system" Oct 2 19:10:52.457193 ignition[607]: fetch-offline: fetch-offline passed Oct 2 19:10:52.456640 unknown[607]: fetched user config from "qemu" Oct 2 19:10:52.457263 ignition[607]: Ignition finished successfully Oct 2 19:10:52.462820 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:10:52.471873 kernel: audit: type=1130 audit(1696273852.467:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.467909 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Oct 2 19:10:52.468932 systemd[1]: Starting ignition-kargs.service... Oct 2 19:10:52.479583 ignition[713]: Ignition 2.14.0 Oct 2 19:10:52.479595 ignition[713]: Stage: kargs Oct 2 19:10:52.479697 ignition[713]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:10:52.497000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.486732 systemd[1]: Finished ignition-kargs.service. Oct 2 19:10:52.505797 kernel: audit: type=1130 audit(1696273852.497:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.479708 ignition[713]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:10:52.501720 systemd[1]: Starting ignition-disks.service... Oct 2 19:10:52.481032 ignition[713]: kargs: kargs passed Oct 2 19:10:52.481083 ignition[713]: Ignition finished successfully Oct 2 19:10:52.510284 ignition[720]: Ignition 2.14.0 Oct 2 19:10:52.510291 ignition[720]: Stage: disks Oct 2 19:10:52.510403 ignition[720]: no configs at "/usr/lib/ignition/base.d" Oct 2 19:10:52.522380 systemd[1]: Finished ignition-disks.service. Oct 2 19:10:52.549930 kernel: audit: type=1130 audit(1696273852.530:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.510413 ignition[720]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:10:52.533051 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:10:52.511853 ignition[720]: disks: disks passed Oct 2 19:10:52.538072 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:10:52.511902 ignition[720]: Ignition finished successfully Oct 2 19:10:52.539004 systemd[1]: Reached target local-fs.target. Oct 2 19:10:52.539732 systemd[1]: Reached target sysinit.target. Oct 2 19:10:52.540411 systemd[1]: Reached target basic.target. Oct 2 19:10:52.548802 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:10:52.622198 systemd-fsck[728]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 19:10:52.662893 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:10:52.678886 kernel: audit: type=1130 audit(1696273852.663:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.666783 systemd[1]: Mounting sysroot.mount... Oct 2 19:10:52.707721 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:10:52.704727 systemd[1]: Mounted sysroot.mount. Oct 2 19:10:52.707874 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:10:52.714180 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:10:52.716916 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:10:52.716954 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:10:52.716979 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:10:52.719204 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:10:52.728574 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:10:52.742426 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:10:52.753454 initrd-setup-root[739]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:10:52.763623 initrd-setup-root[747]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:10:52.765296 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (734) Oct 2 19:10:52.767936 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:10:52.767976 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:10:52.767995 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:10:52.769827 initrd-setup-root[756]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:10:52.774822 initrd-setup-root[779]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:10:52.782322 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:10:52.857380 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:10:52.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.859479 systemd[1]: Starting ignition-mount.service... Oct 2 19:10:52.866416 kernel: audit: type=1130 audit(1696273852.858:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.864884 systemd[1]: Starting sysroot-boot.service... Oct 2 19:10:52.867268 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:10:52.867364 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:10:52.901809 ignition[799]: INFO : Ignition 2.14.0 Oct 2 19:10:52.901809 ignition[799]: INFO : Stage: mount Oct 2 19:10:52.903487 ignition[799]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:10:52.903487 ignition[799]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:10:52.903487 ignition[799]: INFO : mount: mount passed Oct 2 19:10:52.903487 ignition[799]: INFO : Ignition finished successfully Oct 2 19:10:52.910172 systemd[1]: Finished ignition-mount.service. Oct 2 19:10:52.913530 kernel: audit: type=1130 audit(1696273852.910:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.911916 systemd[1]: Starting ignition-files.service... Oct 2 19:10:52.920269 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:10:52.958130 systemd[1]: Finished sysroot-boot.service. Oct 2 19:10:52.963245 kernel: audit: type=1130 audit(1696273852.958:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.963285 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/vda6 scanned by mount (807) Oct 2 19:10:52.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:52.965434 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:10:52.965459 kernel: BTRFS info (device vda6): using free space tree Oct 2 19:10:52.965471 kernel: BTRFS info (device vda6): has skinny extents Oct 2 19:10:52.999162 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:10:53.016560 ignition[830]: INFO : Ignition 2.14.0 Oct 2 19:10:53.016560 ignition[830]: INFO : Stage: files Oct 2 19:10:53.016560 ignition[830]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:10:53.016560 ignition[830]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:10:53.026110 ignition[830]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:10:53.031411 ignition[830]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:10:53.031411 ignition[830]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:10:53.042889 ignition[830]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:10:53.044411 ignition[830]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:10:53.046426 unknown[830]: wrote ssh authorized keys file for user: core Oct 2 19:10:53.048102 ignition[830]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:10:53.049264 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:10:53.049264 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 19:10:53.316655 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:10:53.604769 systemd-networkd[687]: eth0: Gained IPv6LL Oct 2 19:10:53.727402 ignition[830]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 19:10:53.729831 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:10:53.729831 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:10:53.729831 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:10:53.976139 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:10:54.147157 ignition[830]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: a3a2c02a90b008686c20babaf272e703924db2a3e2a0d4e2a7c81d994cbc68c47458a4a354ecc243af095b390815c7f203348b9749351ae817bd52a522300449 Oct 2 19:10:54.147157 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:10:54.158985 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:10:54.158985 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:10:54.265474 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:10:55.056616 ignition[830]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 1c324cd645a7bf93d19d24c87498d9a17878eb1cc927e2680200ffeab2f85051ddec47d85b79b8e774042dc6726299ad3d7caf52c060701f00deba30dc33f660 Oct 2 19:10:55.056616 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:10:55.056616 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:10:55.056616 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:10:55.137639 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:10:56.792559 ignition[830]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 40daf2a9b9e666c14b10e627da931bd79978628b1f23ef6429c1cb4fcba261f86ccff440c0dbb0070ee760fe55772b4fd279c4582dfbb17fa30bc94b7f00126b Oct 2 19:10:56.824837 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:10:56.824837 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:10:56.824837 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:10:56.859868 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:10:57.852383 ignition[830]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 97840854134909d75a1a2563628cc4ba632067369ce7fc8a8a1e90a387d32dd7bfd73f4f5b5a82ef842088e7470692951eb7fc869c5f297dd740f855672ee628 Oct 2 19:10:57.852383 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:10:57.852383 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:10:57.866144 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:10:57.866144 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:10:57.866144 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 19:10:58.112884 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:10:58.245112 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:10:58.245112 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:10:58.249464 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:10:58.249464 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:10:58.249464 ignition[830]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:10:58.249464 ignition[830]: INFO : files: op(c): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:10:58.249464 ignition[830]: INFO : files: op(c): op(d): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:10:58.249464 ignition[830]: INFO : files: op(c): op(d): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:10:58.249464 ignition[830]: INFO : files: op(c): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:10:58.249464 ignition[830]: INFO : files: op(e): [started] processing unit "prepare-critools.service" Oct 2 19:10:58.249464 ignition[830]: INFO : files: op(e): op(f): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:10:58.249464 ignition[830]: INFO : files: op(e): op(f): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:10:58.249464 ignition[830]: INFO : files: op(e): [finished] processing unit "prepare-critools.service" Oct 2 19:10:58.249464 ignition[830]: INFO : files: op(10): [started] processing unit "coreos-metadata.service" Oct 2 19:10:58.249464 ignition[830]: INFO : files: op(10): op(11): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:10:58.249464 ignition[830]: INFO : files: op(10): op(11): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Oct 2 19:10:58.249464 ignition[830]: INFO : files: op(10): [finished] processing unit "coreos-metadata.service" Oct 2 19:10:58.249464 ignition[830]: INFO : files: op(12): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:10:58.249464 ignition[830]: INFO : files: op(12): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:10:58.249464 ignition[830]: INFO : files: op(13): [started] setting preset to disabled for "coreos-metadata.service" Oct 2 19:10:58.288453 ignition[830]: INFO : files: op(13): op(14): [started] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:10:58.423627 ignition[830]: INFO : files: op(13): op(14): [finished] removing enablement symlink(s) for "coreos-metadata.service" Oct 2 19:10:58.423627 ignition[830]: INFO : files: op(13): [finished] setting preset to disabled for "coreos-metadata.service" Oct 2 19:10:58.423627 ignition[830]: INFO : files: op(15): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:10:58.423627 ignition[830]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:10:58.449323 ignition[830]: INFO : files: createResultFile: createFiles: op(16): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:10:58.449323 ignition[830]: INFO : files: createResultFile: createFiles: op(16): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:10:58.449323 ignition[830]: INFO : files: files passed Oct 2 19:10:58.449323 ignition[830]: INFO : Ignition finished successfully Oct 2 19:10:58.434692 systemd[1]: Finished ignition-files.service. Oct 2 19:10:58.475679 kernel: audit: type=1130 audit(1696273858.465:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.465000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.470005 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:10:58.471619 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:10:58.480620 systemd[1]: Starting ignition-quench.service... Oct 2 19:10:58.488182 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:10:58.495317 kernel: audit: type=1130 audit(1696273858.489:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.495361 kernel: audit: type=1131 audit(1696273858.489:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.489000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.495457 initrd-setup-root-after-ignition[856]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Oct 2 19:10:58.488290 systemd[1]: Finished ignition-quench.service. Oct 2 19:10:58.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.503975 initrd-setup-root-after-ignition[858]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:10:58.505115 kernel: audit: type=1130 audit(1696273858.498:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.496025 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:10:58.498582 systemd[1]: Reached target ignition-complete.target. Oct 2 19:10:58.509137 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:10:58.529992 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:10:58.535897 kernel: audit: type=1130 audit(1696273858.530:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.535929 kernel: audit: type=1131 audit(1696273858.530:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.530119 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:10:58.531255 systemd[1]: Reached target initrd-fs.target. Oct 2 19:10:58.539008 systemd[1]: Reached target initrd.target. Oct 2 19:10:58.539675 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:10:58.540641 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:10:58.555562 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:10:58.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.573609 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:10:58.579630 kernel: audit: type=1130 audit(1696273858.570:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.590020 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:10:58.598184 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:10:58.598397 systemd[1]: Stopped target timers.target. Oct 2 19:10:58.600809 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:10:58.601000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.600967 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:10:58.606674 kernel: audit: type=1131 audit(1696273858.601:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.602188 systemd[1]: Stopped target initrd.target. Oct 2 19:10:58.606157 systemd[1]: Stopped target basic.target. Oct 2 19:10:58.608619 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:10:58.609924 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:10:58.611168 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:10:58.612658 systemd[1]: Stopped target remote-fs.target. Oct 2 19:10:58.614030 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:10:58.615482 systemd[1]: Stopped target sysinit.target. Oct 2 19:10:58.616769 systemd[1]: Stopped target local-fs.target. Oct 2 19:10:58.618061 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:10:58.619582 systemd[1]: Stopped target swap.target. Oct 2 19:10:58.621000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.620780 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:10:58.626614 kernel: audit: type=1131 audit(1696273858.621:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.620927 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:10:58.630534 kernel: audit: type=1131 audit(1696273858.627:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.627000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.622253 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:10:58.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.625901 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:10:58.626032 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:10:58.627475 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:10:58.627620 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:10:58.631475 systemd[1]: Stopped target paths.target. Oct 2 19:10:58.633296 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:10:58.637299 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:10:58.638959 systemd[1]: Stopped target slices.target. Oct 2 19:10:58.640407 systemd[1]: Stopped target sockets.target. Oct 2 19:10:58.644000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.642070 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:10:58.642230 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:10:58.646616 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:10:58.646755 systemd[1]: Stopped ignition-files.service. Oct 2 19:10:58.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.658153 systemd[1]: Stopping ignition-mount.service... Oct 2 19:10:58.658467 systemd[1]: Stopping iscsid.service... Oct 2 19:10:58.659796 iscsid[696]: iscsid shutting down. Oct 2 19:10:58.662074 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:10:58.662248 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:10:58.663909 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:10:58.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.665026 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:10:58.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.665176 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:10:58.668000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.668000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.672122 ignition[871]: INFO : Ignition 2.14.0 Oct 2 19:10:58.672122 ignition[871]: INFO : Stage: umount Oct 2 19:10:58.672122 ignition[871]: INFO : no configs at "/usr/lib/ignition/base.d" Oct 2 19:10:58.672122 ignition[871]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Oct 2 19:10:58.672122 ignition[871]: INFO : umount: umount passed Oct 2 19:10:58.672122 ignition[871]: INFO : Ignition finished successfully Oct 2 19:10:58.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.685000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.686000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.666440 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:10:58.666694 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:10:58.670176 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:10:58.692000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.670294 systemd[1]: Stopped iscsid.service. Oct 2 19:10:58.671922 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:10:58.671994 systemd[1]: Closed iscsid.socket. Oct 2 19:10:58.674302 systemd[1]: Stopping iscsiuio.service... Oct 2 19:10:58.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.683514 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:10:58.704000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.683618 systemd[1]: Stopped iscsiuio.service. Oct 2 19:10:58.684205 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:10:58.684290 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:10:58.685580 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:10:58.685647 systemd[1]: Stopped ignition-mount.service. Oct 2 19:10:58.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.687141 systemd[1]: Stopped target network.target. Oct 2 19:10:58.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.712000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.689271 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:10:58.689308 systemd[1]: Closed iscsiuio.socket. Oct 2 19:10:58.691817 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:10:58.691862 systemd[1]: Stopped ignition-disks.service. Oct 2 19:10:58.693086 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:10:58.693119 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:10:58.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.703798 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:10:58.703868 systemd[1]: Stopped ignition-setup.service. Oct 2 19:10:58.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.705361 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:10:58.706601 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:10:58.708511 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:10:58.708981 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:10:58.725000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.709061 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:10:58.709279 systemd-networkd[687]: eth0: DHCPv6 lease lost Oct 2 19:10:58.725000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:10:58.710121 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:10:58.710161 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:10:58.711677 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:10:58.711780 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:10:58.713363 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:10:58.713402 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:10:58.717064 systemd[1]: Stopping network-cleanup.service... Oct 2 19:10:58.718044 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:10:58.718095 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:10:58.718981 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:10:58.719569 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:10:58.722280 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:10:58.723072 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:10:58.725908 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:10:58.739237 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:10:58.740516 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:10:58.741164 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:10:58.742000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.745135 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:10:58.745000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.745288 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:10:58.749717 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:10:58.749822 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:10:58.753134 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:10:58.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.755000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.755000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.753174 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:10:58.753879 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:10:58.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.753924 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:10:58.754660 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:10:58.754699 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:10:58.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.755407 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:10:58.755442 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:10:58.756998 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:10:58.769000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:58.761141 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:10:58.761246 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:10:58.765375 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:10:58.765461 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:10:58.766115 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:10:58.766191 systemd[1]: Stopped network-cleanup.service. Oct 2 19:10:58.770321 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:10:58.777238 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:10:58.779000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:10:58.792751 systemd[1]: Switching root. Oct 2 19:10:58.814025 systemd-journald[197]: Journal stopped Oct 2 19:11:04.236488 systemd-journald[197]: Received SIGTERM from PID 1 (n/a). Oct 2 19:11:04.236551 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:11:04.236569 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:11:04.236583 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:11:04.236597 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:11:04.236611 kernel: SELinux: policy capability open_perms=1 Oct 2 19:11:04.236624 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:11:04.236640 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:11:04.236654 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:11:04.236671 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:11:04.236685 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:11:04.236698 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:11:04.236713 systemd[1]: Successfully loaded SELinux policy in 58.960ms. Oct 2 19:11:04.236731 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 15.938ms. Oct 2 19:11:04.236749 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:11:04.236766 systemd[1]: Detected virtualization kvm. Oct 2 19:11:04.236780 systemd[1]: Detected architecture x86-64. Oct 2 19:11:04.236794 systemd[1]: Detected first boot. Oct 2 19:11:04.236814 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:11:04.236832 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:11:04.236847 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:11:04.236867 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:11:04.236889 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:11:04.236908 kernel: kauditd_printk_skb: 38 callbacks suppressed Oct 2 19:11:04.236923 kernel: audit: type=1334 audit(1696273863.926:83): prog-id=12 op=LOAD Oct 2 19:11:04.236937 kernel: audit: type=1334 audit(1696273863.926:84): prog-id=3 op=UNLOAD Oct 2 19:11:04.236951 kernel: audit: type=1334 audit(1696273863.927:85): prog-id=13 op=LOAD Oct 2 19:11:04.236965 kernel: audit: type=1334 audit(1696273863.928:86): prog-id=14 op=LOAD Oct 2 19:11:04.236979 kernel: audit: type=1334 audit(1696273863.928:87): prog-id=4 op=UNLOAD Oct 2 19:11:04.236993 kernel: audit: type=1334 audit(1696273863.928:88): prog-id=5 op=UNLOAD Oct 2 19:11:04.237007 kernel: audit: type=1334 audit(1696273863.931:89): prog-id=15 op=LOAD Oct 2 19:11:04.237023 kernel: audit: type=1334 audit(1696273863.931:90): prog-id=12 op=UNLOAD Oct 2 19:11:04.237038 kernel: audit: type=1334 audit(1696273863.933:91): prog-id=16 op=LOAD Oct 2 19:11:04.237051 kernel: audit: type=1334 audit(1696273863.935:92): prog-id=17 op=LOAD Oct 2 19:11:04.237066 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:11:04.237081 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:11:04.237097 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:11:04.237112 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:11:04.237128 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:11:04.237143 systemd[1]: Created slice system-getty.slice. Oct 2 19:11:04.237164 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:11:04.237179 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:11:04.237195 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:11:04.237225 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:11:04.237241 systemd[1]: Created slice user.slice. Oct 2 19:11:04.237256 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:11:04.237270 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:11:04.237288 systemd[1]: Set up automount boot.automount. Oct 2 19:11:04.237303 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:11:04.237317 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:11:04.237331 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:11:04.237357 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:11:04.237371 systemd[1]: Reached target integritysetup.target. Oct 2 19:11:04.237387 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:11:04.237402 systemd[1]: Reached target remote-fs.target. Oct 2 19:11:04.237416 systemd[1]: Reached target slices.target. Oct 2 19:11:04.237430 systemd[1]: Reached target swap.target. Oct 2 19:11:04.237447 systemd[1]: Reached target torcx.target. Oct 2 19:11:04.237463 systemd[1]: Reached target veritysetup.target. Oct 2 19:11:04.237479 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:11:04.237494 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:11:04.237511 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:11:04.237527 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:11:04.237541 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:11:04.237557 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:11:04.237572 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:11:04.237590 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:11:04.237605 systemd[1]: Mounting media.mount... Oct 2 19:11:04.237621 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:11:04.237636 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:11:04.237649 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:11:04.237663 systemd[1]: Mounting tmp.mount... Oct 2 19:11:04.237678 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:11:04.237693 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:11:04.237709 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:11:04.237726 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:11:04.237742 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:11:04.237757 systemd[1]: Starting modprobe@drm.service... Oct 2 19:11:04.237776 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:11:04.237791 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:11:04.237804 systemd[1]: Starting modprobe@loop.service... Oct 2 19:11:04.237820 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:11:04.237837 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:11:04.237853 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:11:04.237872 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:11:04.237886 kernel: fuse: init (API version 7.34) Oct 2 19:11:04.237901 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:11:04.237915 systemd[1]: Stopped systemd-journald.service. Oct 2 19:11:04.237929 kernel: loop: module loaded Oct 2 19:11:04.237943 systemd[1]: Starting systemd-journald.service... Oct 2 19:11:04.237958 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:11:04.237973 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:11:04.237988 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:11:04.238005 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:11:04.238021 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:11:04.238036 systemd[1]: Stopped verity-setup.service. Oct 2 19:11:04.238051 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:11:04.238070 systemd-journald[990]: Journal started Oct 2 19:11:04.238122 systemd-journald[990]: Runtime Journal (/run/log/journal/2f02491b662242ea8f2e1849f62bff97) is 6.0M, max 48.5M, 42.5M free. Oct 2 19:10:58.950000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:10:59.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:10:59.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:10:59.098000 audit: BPF prog-id=10 op=LOAD Oct 2 19:10:59.098000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:10:59.099000 audit: BPF prog-id=11 op=LOAD Oct 2 19:10:59.099000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:11:03.926000 audit: BPF prog-id=12 op=LOAD Oct 2 19:11:03.926000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:11:03.927000 audit: BPF prog-id=13 op=LOAD Oct 2 19:11:03.928000 audit: BPF prog-id=14 op=LOAD Oct 2 19:11:03.928000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:11:03.928000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:11:03.931000 audit: BPF prog-id=15 op=LOAD Oct 2 19:11:03.931000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:11:03.933000 audit: BPF prog-id=16 op=LOAD Oct 2 19:11:03.935000 audit: BPF prog-id=17 op=LOAD Oct 2 19:11:03.935000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:11:03.935000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:11:03.936000 audit: BPF prog-id=18 op=LOAD Oct 2 19:11:03.936000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:11:03.937000 audit: BPF prog-id=19 op=LOAD Oct 2 19:11:03.937000 audit: BPF prog-id=20 op=LOAD Oct 2 19:11:03.937000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:11:03.937000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:11:03.942000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:03.953000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:11:03.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.239595 systemd[1]: Started systemd-journald.service. Oct 2 19:11:03.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.170000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.170000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.176000 audit: BPF prog-id=21 op=LOAD Oct 2 19:11:04.179000 audit: BPF prog-id=22 op=LOAD Oct 2 19:11:04.184000 audit: BPF prog-id=23 op=LOAD Oct 2 19:11:04.186000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:11:04.186000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:11:04.234000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.234000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:11:04.234000 audit[990]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffece0a9990 a2=4000 a3=7ffece0a9a2c items=0 ppid=1 pid=990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:04.234000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:11:04.239000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:03.921030 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:10:59.264056 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:10:59Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:11:03.921048 systemd[1]: Unnecessary job was removed for dev-vda6.device. Oct 2 19:10:59.264605 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:10:59Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:11:04.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:03.937945 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:10:59.264625 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:10:59Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:11:04.239754 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:10:59.264657 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:10:59Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:11:04.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.240473 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:10:59.264668 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:10:59Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:11:04.241155 systemd[1]: Mounted media.mount. Oct 2 19:11:04.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.247000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:59.264712 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:10:59Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:11:04.241797 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:10:59.264731 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:10:59Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:11:04.242530 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:10:59.264973 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:10:59Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:11:04.243282 systemd[1]: Mounted tmp.mount. Oct 2 19:10:59.265014 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:10:59Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:11:04.244032 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:10:59.265025 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:10:59Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:11:04.244932 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:10:59.272715 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:10:59Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:11:04.245854 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:10:59.272768 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:10:59Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:11:04.245975 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:10:59.272796 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:10:59Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:11:04.246930 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:10:59.272816 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:10:59Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:11:04.247041 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:10:59.272841 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:10:59Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:11:04.247983 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:10:59.272858 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:10:59Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:11:04.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.248000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.249000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.250000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.248090 systemd[1]: Finished modprobe@drm.service. Oct 2 19:11:03.117543 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:11:03Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:11:04.248994 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:11:03.117874 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:11:03Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:11:04.249091 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:11:03.117999 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:11:03Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:11:04.250049 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:11:03.118178 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:11:03Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:11:04.250150 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:11:03.118255 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:11:03Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:11:04.251028 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:11:03.118321 /usr/lib/systemd/system-generators/torcx-generator[913]: time="2023-10-02T19:11:03Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:11:04.251123 systemd[1]: Finished modprobe@loop.service. Oct 2 19:11:04.252037 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:11:04.252970 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:11:04.253980 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:11:04.255077 systemd[1]: Reached target network-pre.target. Oct 2 19:11:04.256775 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:11:04.258483 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:11:04.259136 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:11:04.260731 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:11:04.262494 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:11:04.263235 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:11:04.264278 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:11:04.265190 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:11:04.266177 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:11:04.277476 systemd-journald[990]: Time spent on flushing to /var/log/journal/2f02491b662242ea8f2e1849f62bff97 is 20.748ms for 1133 entries. Oct 2 19:11:04.277476 systemd-journald[990]: System Journal (/var/log/journal/2f02491b662242ea8f2e1849f62bff97) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:11:04.356672 systemd-journald[990]: Received client request to flush runtime journal. Oct 2 19:11:04.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.268476 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:11:04.271013 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:11:04.273867 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:11:04.357512 udevadm[1016]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:11:04.297426 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:11:04.303518 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:11:04.306433 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:11:04.307331 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:11:04.322480 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:11:04.359062 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:11:04.360000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.365783 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:11:04.368000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.906004 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:11:04.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:04.907000 audit: BPF prog-id=24 op=LOAD Oct 2 19:11:04.907000 audit: BPF prog-id=25 op=LOAD Oct 2 19:11:04.907000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:11:04.907000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:11:04.908930 systemd[1]: Starting systemd-udevd.service... Oct 2 19:11:04.935827 systemd-udevd[1019]: Using default interface naming scheme 'v252'. Oct 2 19:11:05.022695 systemd[1]: Started systemd-udevd.service. Oct 2 19:11:05.024000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:05.053000 audit: BPF prog-id=26 op=LOAD Oct 2 19:11:05.057570 systemd[1]: Starting systemd-networkd.service... Oct 2 19:11:05.094000 audit: BPF prog-id=27 op=LOAD Oct 2 19:11:05.108000 audit: BPF prog-id=28 op=LOAD Oct 2 19:11:05.108000 audit: BPF prog-id=29 op=LOAD Oct 2 19:11:05.110010 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:11:05.132031 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:11:05.190993 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:11:05.195236 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 2 19:11:05.197000 audit[1027]: AVC avc: denied { confidentiality } for pid=1027 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:11:05.197000 audit[1027]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55c073c12730 a1=32194 a2=7f2b8a1fbbc5 a3=5 items=106 ppid=1019 pid=1027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:05.197000 audit: CWD cwd="/" Oct 2 19:11:05.197000 audit: PATH item=0 name=(null) inode=12973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=1 name=(null) inode=12974 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=2 name=(null) inode=12973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=3 name=(null) inode=12975 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=4 name=(null) inode=12973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=5 name=(null) inode=12976 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=6 name=(null) inode=12976 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=7 name=(null) inode=12977 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=8 name=(null) inode=12976 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=9 name=(null) inode=12978 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=10 name=(null) inode=12976 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=11 name=(null) inode=12979 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=12 name=(null) inode=12976 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=13 name=(null) inode=12980 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=14 name=(null) inode=12976 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=15 name=(null) inode=12981 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=16 name=(null) inode=12973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=17 name=(null) inode=12982 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=18 name=(null) inode=12982 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=19 name=(null) inode=12983 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=20 name=(null) inode=12982 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=21 name=(null) inode=12984 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=22 name=(null) inode=12982 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=23 name=(null) inode=12985 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=24 name=(null) inode=12982 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=25 name=(null) inode=12986 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=26 name=(null) inode=12982 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=27 name=(null) inode=12987 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=28 name=(null) inode=12973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=29 name=(null) inode=12988 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=30 name=(null) inode=12988 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=31 name=(null) inode=12989 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=32 name=(null) inode=12988 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=33 name=(null) inode=12990 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=34 name=(null) inode=12988 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=35 name=(null) inode=12991 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=36 name=(null) inode=12988 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=37 name=(null) inode=12992 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=38 name=(null) inode=12988 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=39 name=(null) inode=12993 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=40 name=(null) inode=12973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=41 name=(null) inode=12994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=42 name=(null) inode=12994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=43 name=(null) inode=12995 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=44 name=(null) inode=12994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=45 name=(null) inode=12996 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=46 name=(null) inode=12994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=47 name=(null) inode=12997 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=48 name=(null) inode=12994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=49 name=(null) inode=12998 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=50 name=(null) inode=12994 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=51 name=(null) inode=12999 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=52 name=(null) inode=44 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=53 name=(null) inode=13000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=54 name=(null) inode=13000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=55 name=(null) inode=13001 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=56 name=(null) inode=13000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=57 name=(null) inode=13002 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=58 name=(null) inode=13000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=59 name=(null) inode=13003 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=60 name=(null) inode=13003 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=61 name=(null) inode=13004 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=62 name=(null) inode=13003 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=63 name=(null) inode=13005 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=64 name=(null) inode=13003 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=65 name=(null) inode=13006 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=66 name=(null) inode=13003 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=67 name=(null) inode=13007 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=68 name=(null) inode=13003 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=69 name=(null) inode=13008 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=70 name=(null) inode=13000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=71 name=(null) inode=13009 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=72 name=(null) inode=13009 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=73 name=(null) inode=13010 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=74 name=(null) inode=13009 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.206248 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:11:05.197000 audit: PATH item=75 name=(null) inode=13011 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=76 name=(null) inode=13009 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=77 name=(null) inode=13012 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=78 name=(null) inode=13009 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=79 name=(null) inode=13013 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=80 name=(null) inode=13009 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=81 name=(null) inode=13014 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=82 name=(null) inode=13000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=83 name=(null) inode=13015 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=84 name=(null) inode=13015 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=85 name=(null) inode=13016 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=86 name=(null) inode=13015 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=87 name=(null) inode=13017 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=88 name=(null) inode=13015 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=89 name=(null) inode=13018 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=90 name=(null) inode=13015 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=91 name=(null) inode=13019 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=92 name=(null) inode=13015 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=93 name=(null) inode=13020 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=94 name=(null) inode=13000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=95 name=(null) inode=13021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=96 name=(null) inode=13021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=97 name=(null) inode=13022 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=98 name=(null) inode=13021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=99 name=(null) inode=13023 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=100 name=(null) inode=13021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=101 name=(null) inode=13024 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=102 name=(null) inode=13021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=103 name=(null) inode=13025 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=104 name=(null) inode=13021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PATH item=105 name=(null) inode=13026 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:11:05.197000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:11:05.215260 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Oct 2 19:11:05.221251 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Oct 2 19:11:05.224333 systemd[1]: Started systemd-userdbd.service. Oct 2 19:11:05.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:05.285581 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:11:05.322940 systemd-networkd[1035]: lo: Link UP Oct 2 19:11:05.322960 systemd-networkd[1035]: lo: Gained carrier Oct 2 19:11:05.323560 systemd-networkd[1035]: Enumeration completed Oct 2 19:11:05.323685 systemd[1]: Started systemd-networkd.service. Oct 2 19:11:05.324471 systemd-networkd[1035]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:11:05.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:05.326231 systemd-networkd[1035]: eth0: Link UP Oct 2 19:11:05.326239 systemd-networkd[1035]: eth0: Gained carrier Oct 2 19:11:05.396480 systemd-networkd[1035]: eth0: DHCPv4 address 10.0.0.65/16, gateway 10.0.0.1 acquired from 10.0.0.1 Oct 2 19:11:05.407361 kernel: kvm: Nested Virtualization enabled Oct 2 19:11:05.407502 kernel: SVM: kvm: Nested Paging enabled Oct 2 19:11:05.520558 kernel: EDAC MC: Ver: 3.0.0 Oct 2 19:11:05.550847 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:11:05.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:05.553650 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:11:05.596182 lvm[1054]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:11:05.626994 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:11:05.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:05.629277 systemd[1]: Reached target cryptsetup.target. Oct 2 19:11:05.632059 systemd[1]: Starting lvm2-activation.service... Oct 2 19:11:05.653597 lvm[1055]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:11:05.678411 systemd[1]: Finished lvm2-activation.service. Oct 2 19:11:05.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:05.679549 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:11:05.681375 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:11:05.681409 systemd[1]: Reached target local-fs.target. Oct 2 19:11:05.682106 systemd[1]: Reached target machines.target. Oct 2 19:11:05.684407 systemd[1]: Starting ldconfig.service... Oct 2 19:11:05.688163 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:11:05.688262 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:11:05.693665 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:11:05.700601 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:11:05.704017 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:11:05.706505 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:11:05.706551 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:11:05.707897 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:11:05.709125 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1057 (bootctl) Oct 2 19:11:05.717123 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:11:05.748201 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:11:05.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:05.784085 systemd-tmpfiles[1060]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:11:06.055817 systemd-tmpfiles[1060]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:11:06.314852 systemd-tmpfiles[1060]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:11:06.380243 systemd-fsck[1065]: fsck.fat 4.2 (2021-01-31) Oct 2 19:11:06.380243 systemd-fsck[1065]: /dev/vda1: 789 files, 115069/258078 clusters Oct 2 19:11:06.383187 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:11:06.385000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:06.387325 systemd[1]: Mounting boot.mount... Oct 2 19:11:06.445507 systemd[1]: Mounted boot.mount. Oct 2 19:11:06.480000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:06.481501 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:11:06.482290 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:11:06.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:06.495550 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:11:06.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:06.689609 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:11:06.698115 systemd[1]: Starting audit-rules.service... Oct 2 19:11:06.700471 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:11:06.702531 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:11:06.705000 audit: BPF prog-id=30 op=LOAD Oct 2 19:11:06.707690 systemd[1]: Starting systemd-resolved.service... Oct 2 19:11:06.718000 audit: BPF prog-id=31 op=LOAD Oct 2 19:11:06.720540 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:11:06.724749 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:11:06.727151 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:11:06.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:06.728349 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:11:06.732000 audit[1075]: SYSTEM_BOOT pid=1075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:11:06.736465 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:11:06.737000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:06.757135 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:11:06.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:06.803513 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:11:06.805028 systemd[1]: Reached target time-set.target. Oct 2 19:11:06.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:07.239140 systemd-timesyncd[1074]: Contacted time server 10.0.0.1:123 (10.0.0.1). Oct 2 19:11:07.239363 systemd-timesyncd[1074]: Initial clock synchronization to Mon 2023-10-02 19:11:07.239057 UTC. Oct 2 19:11:07.239000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:11:07.239000 audit[1089]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe5abe87c0 a2=420 a3=0 items=0 ppid=1069 pid=1089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:07.239000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:11:07.241046 augenrules[1089]: No rules Oct 2 19:11:07.245465 systemd[1]: Finished audit-rules.service. Oct 2 19:11:07.257960 systemd-resolved[1072]: Positive Trust Anchors: Oct 2 19:11:07.257984 systemd-resolved[1072]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:11:07.258022 systemd-resolved[1072]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:11:07.293565 systemd-resolved[1072]: Defaulting to hostname 'linux'. Oct 2 19:11:07.295217 systemd[1]: Started systemd-resolved.service. Oct 2 19:11:07.296519 systemd[1]: Reached target network.target. Oct 2 19:11:07.297162 systemd[1]: Reached target nss-lookup.target. Oct 2 19:11:07.597024 systemd-networkd[1035]: eth0: Gained IPv6LL Oct 2 19:11:07.662450 ldconfig[1056]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:11:07.704668 systemd[1]: Finished ldconfig.service. Oct 2 19:11:07.720128 systemd[1]: Starting systemd-update-done.service... Oct 2 19:11:07.755062 systemd[1]: Finished systemd-update-done.service. Oct 2 19:11:07.756288 systemd[1]: Reached target sysinit.target. Oct 2 19:11:07.757306 systemd[1]: Started motdgen.path. Oct 2 19:11:07.758143 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:11:07.761768 systemd[1]: Started logrotate.timer. Oct 2 19:11:07.765530 systemd[1]: Started mdadm.timer. Oct 2 19:11:07.766330 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:11:07.774043 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:11:07.774092 systemd[1]: Reached target paths.target. Oct 2 19:11:07.781104 systemd[1]: Reached target timers.target. Oct 2 19:11:07.786614 systemd[1]: Listening on dbus.socket. Oct 2 19:11:07.789359 systemd[1]: Starting docker.socket... Oct 2 19:11:07.797077 systemd[1]: Listening on sshd.socket. Oct 2 19:11:07.806164 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:11:07.809492 systemd[1]: Listening on docker.socket. Oct 2 19:11:07.812262 systemd[1]: Reached target sockets.target. Oct 2 19:11:07.814577 systemd[1]: Reached target basic.target. Oct 2 19:11:07.816241 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:11:07.817058 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:11:07.824540 systemd[1]: Starting containerd.service... Oct 2 19:11:07.837511 systemd[1]: Starting dbus.service... Oct 2 19:11:07.845338 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:11:07.847920 systemd[1]: Starting extend-filesystems.service... Oct 2 19:11:07.848920 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:11:07.850639 systemd[1]: Starting motdgen.service... Oct 2 19:11:07.856256 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:11:07.865807 systemd[1]: Starting prepare-critools.service... Oct 2 19:11:07.866970 jq[1100]: false Oct 2 19:11:07.869722 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:11:07.873238 systemd[1]: Starting sshd-keygen.service... Oct 2 19:11:07.887768 extend-filesystems[1101]: Found sr0 Oct 2 19:11:07.887768 extend-filesystems[1101]: Found vda Oct 2 19:11:07.887768 extend-filesystems[1101]: Found vda1 Oct 2 19:11:07.887768 extend-filesystems[1101]: Found vda2 Oct 2 19:11:07.887768 extend-filesystems[1101]: Found vda3 Oct 2 19:11:07.887768 extend-filesystems[1101]: Found usr Oct 2 19:11:07.887768 extend-filesystems[1101]: Found vda4 Oct 2 19:11:07.887768 extend-filesystems[1101]: Found vda6 Oct 2 19:11:07.887768 extend-filesystems[1101]: Found vda7 Oct 2 19:11:07.887768 extend-filesystems[1101]: Found vda9 Oct 2 19:11:07.887768 extend-filesystems[1101]: Checking size of /dev/vda9 Oct 2 19:11:08.007751 extend-filesystems[1101]: Old size kept for /dev/vda9 Oct 2 19:11:07.887894 systemd[1]: Starting systemd-logind.service... Oct 2 19:11:07.894276 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:11:07.894350 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:11:07.894958 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:11:08.013460 jq[1122]: true Oct 2 19:11:07.901001 systemd[1]: Starting update-engine.service... Oct 2 19:11:07.946762 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:11:08.013769 tar[1127]: ./ Oct 2 19:11:08.013769 tar[1127]: ./macvlan Oct 2 19:11:07.954105 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:11:07.954273 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:11:07.954539 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:11:08.014304 jq[1129]: true Oct 2 19:11:07.954665 systemd[1]: Finished motdgen.service. Oct 2 19:11:07.965421 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:11:07.965598 systemd[1]: Finished extend-filesystems.service. Oct 2 19:11:07.973534 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:11:07.973708 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:11:08.020228 tar[1128]: crictl Oct 2 19:11:08.020505 dbus-daemon[1099]: [system] SELinux support is enabled Oct 2 19:11:08.020644 systemd[1]: Started dbus.service. Oct 2 19:11:08.023449 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:11:08.023484 systemd[1]: Reached target system-config.target. Oct 2 19:11:08.024230 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:11:08.024246 systemd[1]: Reached target user-config.target. Oct 2 19:11:08.027871 env[1130]: time="2023-10-02T19:11:08.027570535Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:11:08.080149 update_engine[1120]: I1002 19:11:08.079337 1120 main.cc:92] Flatcar Update Engine starting Oct 2 19:11:08.080037 systemd-logind[1117]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:11:08.080058 systemd-logind[1117]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:11:08.080633 systemd-logind[1117]: New seat seat0. Oct 2 19:11:08.082125 tar[1127]: ./static Oct 2 19:11:08.084242 systemd[1]: Started update-engine.service. Oct 2 19:11:08.084962 update_engine[1120]: I1002 19:11:08.084820 1120 update_check_scheduler.cc:74] Next update check in 4m54s Oct 2 19:11:08.086943 systemd[1]: Started locksmithd.service. Oct 2 19:11:08.089147 systemd[1]: Started systemd-logind.service. Oct 2 19:11:08.095020 env[1130]: time="2023-10-02T19:11:08.094970925Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:11:08.095290 env[1130]: time="2023-10-02T19:11:08.095265006Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:11:08.115265 env[1130]: time="2023-10-02T19:11:08.114069571Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:11:08.115265 env[1130]: time="2023-10-02T19:11:08.114127680Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:11:08.115265 env[1130]: time="2023-10-02T19:11:08.114385865Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:11:08.115265 env[1130]: time="2023-10-02T19:11:08.114408828Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:11:08.115265 env[1130]: time="2023-10-02T19:11:08.114426902Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:11:08.115265 env[1130]: time="2023-10-02T19:11:08.114441098Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:11:08.115265 env[1130]: time="2023-10-02T19:11:08.114534123Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:11:08.115265 env[1130]: time="2023-10-02T19:11:08.114834085Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:11:08.115265 env[1130]: time="2023-10-02T19:11:08.114963528Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:11:08.115265 env[1130]: time="2023-10-02T19:11:08.114980590Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:11:08.115596 env[1130]: time="2023-10-02T19:11:08.115037687Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:11:08.115596 env[1130]: time="2023-10-02T19:11:08.115054569Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:11:08.118427 tar[1127]: ./vlan Oct 2 19:11:08.161238 tar[1127]: ./portmap Oct 2 19:11:08.168500 bash[1155]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:11:08.171878 env[1130]: time="2023-10-02T19:11:08.170272602Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:11:08.171878 env[1130]: time="2023-10-02T19:11:08.170345128Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:11:08.171878 env[1130]: time="2023-10-02T19:11:08.170368512Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:11:08.171878 env[1130]: time="2023-10-02T19:11:08.170423906Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:11:08.171878 env[1130]: time="2023-10-02T19:11:08.170441689Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:11:08.171878 env[1130]: time="2023-10-02T19:11:08.170457980Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:11:08.171878 env[1130]: time="2023-10-02T19:11:08.170490892Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:11:08.171878 env[1130]: time="2023-10-02T19:11:08.170508404Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:11:08.171878 env[1130]: time="2023-10-02T19:11:08.170523923Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:11:08.171878 env[1130]: time="2023-10-02T19:11:08.170599866Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:11:08.171878 env[1130]: time="2023-10-02T19:11:08.170626736Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:11:08.171878 env[1130]: time="2023-10-02T19:11:08.170641524Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:11:08.171878 env[1130]: time="2023-10-02T19:11:08.170808908Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:11:08.171878 env[1130]: time="2023-10-02T19:11:08.170937780Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:11:08.172275 env[1130]: time="2023-10-02T19:11:08.171293747Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:11:08.172275 env[1130]: time="2023-10-02T19:11:08.171324565Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:11:08.172275 env[1130]: time="2023-10-02T19:11:08.171341407Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:11:08.172275 env[1130]: time="2023-10-02T19:11:08.171411258Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:11:08.172275 env[1130]: time="2023-10-02T19:11:08.171427187Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:11:08.172275 env[1130]: time="2023-10-02T19:11:08.171459117Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:11:08.172275 env[1130]: time="2023-10-02T19:11:08.171474416Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:11:08.172275 env[1130]: time="2023-10-02T19:11:08.171490767Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:11:08.172275 env[1130]: time="2023-10-02T19:11:08.171589141Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:11:08.172275 env[1130]: time="2023-10-02T19:11:08.171606724Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:11:08.172275 env[1130]: time="2023-10-02T19:11:08.171621362Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:11:08.172275 env[1130]: time="2023-10-02T19:11:08.171638414Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:11:08.172275 env[1130]: time="2023-10-02T19:11:08.171781592Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:11:08.172275 env[1130]: time="2023-10-02T19:11:08.171823441Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:11:08.172275 env[1130]: time="2023-10-02T19:11:08.171837527Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:11:08.172680 env[1130]: time="2023-10-02T19:11:08.171851253Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:11:08.173111 env[1130]: time="2023-10-02T19:11:08.172734689Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:11:08.173111 env[1130]: time="2023-10-02T19:11:08.172758674Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:11:08.173111 env[1130]: time="2023-10-02T19:11:08.172841560Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:11:08.173111 env[1130]: time="2023-10-02T19:11:08.172895711Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:11:08.173376 env[1130]: time="2023-10-02T19:11:08.173294289Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:11:08.181951 env[1130]: time="2023-10-02T19:11:08.173580836Z" level=info msg="Connect containerd service" Oct 2 19:11:08.181951 env[1130]: time="2023-10-02T19:11:08.173648663Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:11:08.181951 env[1130]: time="2023-10-02T19:11:08.174361801Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:11:08.181951 env[1130]: time="2023-10-02T19:11:08.174487166Z" level=info msg="Start subscribing containerd event" Oct 2 19:11:08.181951 env[1130]: time="2023-10-02T19:11:08.174529044Z" level=info msg="Start recovering state" Oct 2 19:11:08.181951 env[1130]: time="2023-10-02T19:11:08.174600278Z" level=info msg="Start event monitor" Oct 2 19:11:08.181951 env[1130]: time="2023-10-02T19:11:08.174623942Z" level=info msg="Start snapshots syncer" Oct 2 19:11:08.181951 env[1130]: time="2023-10-02T19:11:08.174633060Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:11:08.181951 env[1130]: time="2023-10-02T19:11:08.174640964Z" level=info msg="Start streaming server" Oct 2 19:11:08.181951 env[1130]: time="2023-10-02T19:11:08.175034432Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:11:08.181951 env[1130]: time="2023-10-02T19:11:08.175084777Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:11:08.183363 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:11:08.206644 tar[1127]: ./host-local Oct 2 19:11:08.207848 env[1130]: time="2023-10-02T19:11:08.207667050Z" level=info msg="containerd successfully booted in 0.180931s" Oct 2 19:11:08.207713 systemd[1]: Started containerd.service. Oct 2 19:11:08.241065 tar[1127]: ./vrf Oct 2 19:11:08.279119 tar[1127]: ./bridge Oct 2 19:11:08.316482 tar[1127]: ./tuning Oct 2 19:11:08.340230 locksmithd[1156]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:11:08.348817 tar[1127]: ./firewall Oct 2 19:11:08.391633 tar[1127]: ./host-device Oct 2 19:11:08.429292 tar[1127]: ./sbr Oct 2 19:11:08.463677 tar[1127]: ./loopback Oct 2 19:11:08.496467 tar[1127]: ./dhcp Oct 2 19:11:08.588913 systemd[1]: Finished prepare-critools.service. Oct 2 19:11:08.594252 tar[1127]: ./ptp Oct 2 19:11:08.635138 tar[1127]: ./ipvlan Oct 2 19:11:08.694110 tar[1127]: ./bandwidth Oct 2 19:11:08.789277 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:11:09.994713 sshd_keygen[1118]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:11:10.054148 systemd[1]: Finished sshd-keygen.service. Oct 2 19:11:10.056889 systemd[1]: Starting issuegen.service... Oct 2 19:11:10.071525 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:11:10.075204 systemd[1]: Finished issuegen.service. Oct 2 19:11:10.081383 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:11:10.095235 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:11:10.097371 systemd[1]: Started getty@tty1.service. Oct 2 19:11:10.099513 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:11:10.100411 systemd[1]: Reached target getty.target. Oct 2 19:11:10.101201 systemd[1]: Reached target multi-user.target. Oct 2 19:11:10.103023 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:11:10.116315 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:11:10.116516 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:11:10.117386 systemd[1]: Startup finished in 812ms (kernel) + 11.074s (initrd) + 10.805s (userspace) = 22.691s. Oct 2 19:11:16.403456 systemd[1]: Created slice system-sshd.slice. Oct 2 19:11:16.404349 systemd[1]: Started sshd@0-10.0.0.65:22-10.0.0.1:44928.service. Oct 2 19:11:16.446381 sshd[1182]: Accepted publickey for core from 10.0.0.1 port 44928 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:11:16.447729 sshd[1182]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:11:16.456037 systemd-logind[1117]: New session 1 of user core. Oct 2 19:11:16.456868 systemd[1]: Created slice user-500.slice. Oct 2 19:11:16.457816 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:11:16.465087 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:11:16.466117 systemd[1]: Starting user@500.service... Oct 2 19:11:16.468558 (systemd)[1185]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:11:16.544683 systemd[1185]: Queued start job for default target default.target. Oct 2 19:11:16.545166 systemd[1185]: Reached target paths.target. Oct 2 19:11:16.545193 systemd[1185]: Reached target sockets.target. Oct 2 19:11:16.545209 systemd[1185]: Reached target timers.target. Oct 2 19:11:16.545222 systemd[1185]: Reached target basic.target. Oct 2 19:11:16.545269 systemd[1185]: Reached target default.target. Oct 2 19:11:16.545298 systemd[1185]: Startup finished in 71ms. Oct 2 19:11:16.545461 systemd[1]: Started user@500.service. Oct 2 19:11:16.546460 systemd[1]: Started session-1.scope. Oct 2 19:11:16.597606 systemd[1]: Started sshd@1-10.0.0.65:22-10.0.0.1:44940.service. Oct 2 19:11:16.634778 sshd[1194]: Accepted publickey for core from 10.0.0.1 port 44940 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:11:16.636049 sshd[1194]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:11:16.639952 systemd-logind[1117]: New session 2 of user core. Oct 2 19:11:16.640684 systemd[1]: Started session-2.scope. Oct 2 19:11:16.695639 sshd[1194]: pam_unix(sshd:session): session closed for user core Oct 2 19:11:16.697989 systemd[1]: sshd@1-10.0.0.65:22-10.0.0.1:44940.service: Deactivated successfully. Oct 2 19:11:16.698504 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:11:16.698962 systemd-logind[1117]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:11:16.700099 systemd[1]: Started sshd@2-10.0.0.65:22-10.0.0.1:44950.service. Oct 2 19:11:16.700935 systemd-logind[1117]: Removed session 2. Oct 2 19:11:16.735934 sshd[1200]: Accepted publickey for core from 10.0.0.1 port 44950 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:11:16.737034 sshd[1200]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:11:16.740239 systemd-logind[1117]: New session 3 of user core. Oct 2 19:11:16.740992 systemd[1]: Started session-3.scope. Oct 2 19:11:16.789222 sshd[1200]: pam_unix(sshd:session): session closed for user core Oct 2 19:11:16.792136 systemd[1]: sshd@2-10.0.0.65:22-10.0.0.1:44950.service: Deactivated successfully. Oct 2 19:11:16.792703 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:11:16.793339 systemd-logind[1117]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:11:16.794393 systemd[1]: Started sshd@3-10.0.0.65:22-10.0.0.1:44954.service. Oct 2 19:11:16.795264 systemd-logind[1117]: Removed session 3. Oct 2 19:11:16.831273 sshd[1206]: Accepted publickey for core from 10.0.0.1 port 44954 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:11:16.832408 sshd[1206]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:11:16.835809 systemd-logind[1117]: New session 4 of user core. Oct 2 19:11:16.836557 systemd[1]: Started session-4.scope. Oct 2 19:11:16.888412 sshd[1206]: pam_unix(sshd:session): session closed for user core Oct 2 19:11:16.891107 systemd[1]: sshd@3-10.0.0.65:22-10.0.0.1:44954.service: Deactivated successfully. Oct 2 19:11:16.891737 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:11:16.892289 systemd-logind[1117]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:11:16.893224 systemd[1]: Started sshd@4-10.0.0.65:22-10.0.0.1:44966.service. Oct 2 19:11:16.894076 systemd-logind[1117]: Removed session 4. Oct 2 19:11:16.928581 sshd[1212]: Accepted publickey for core from 10.0.0.1 port 44966 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:11:16.929459 sshd[1212]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:11:16.932406 systemd-logind[1117]: New session 5 of user core. Oct 2 19:11:16.933211 systemd[1]: Started session-5.scope. Oct 2 19:11:16.990164 sudo[1215]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:11:16.990379 sudo[1215]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:11:16.998981 dbus-daemon[1099]: \xd0\xedܽ8V: received setenforce notice (enforcing=-1943344560) Oct 2 19:11:17.001103 sudo[1215]: pam_unix(sudo:session): session closed for user root Oct 2 19:11:17.003193 sshd[1212]: pam_unix(sshd:session): session closed for user core Oct 2 19:11:17.005851 systemd[1]: sshd@4-10.0.0.65:22-10.0.0.1:44966.service: Deactivated successfully. Oct 2 19:11:17.006310 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:11:17.006754 systemd-logind[1117]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:11:17.007656 systemd[1]: Started sshd@5-10.0.0.65:22-10.0.0.1:44972.service. Oct 2 19:11:17.008329 systemd-logind[1117]: Removed session 5. Oct 2 19:11:17.044398 sshd[1219]: Accepted publickey for core from 10.0.0.1 port 44972 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:11:17.045486 sshd[1219]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:11:17.049255 systemd-logind[1117]: New session 6 of user core. Oct 2 19:11:17.050252 systemd[1]: Started session-6.scope. Oct 2 19:11:17.103185 sudo[1223]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:11:17.103336 sudo[1223]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:11:17.106395 sudo[1223]: pam_unix(sudo:session): session closed for user root Oct 2 19:11:17.111059 sudo[1222]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:11:17.111285 sudo[1222]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:11:17.119333 systemd[1]: Stopping audit-rules.service... Oct 2 19:11:17.120000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:11:17.121119 auditctl[1226]: No rules Oct 2 19:11:17.121480 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:11:17.121620 systemd[1]: Stopped audit-rules.service. Oct 2 19:11:17.122893 kernel: kauditd_printk_skb: 188 callbacks suppressed Oct 2 19:11:17.123025 kernel: audit: type=1305 audit(1696273877.120:168): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:11:17.123070 kernel: audit: type=1300 audit(1696273877.120:168): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd4305b470 a2=420 a3=0 items=0 ppid=1 pid=1226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.120000 audit[1226]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd4305b470 a2=420 a3=0 items=0 ppid=1 pid=1226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.122994 systemd[1]: Starting audit-rules.service... Oct 2 19:11:17.120000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:11:17.120000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:17.128921 kernel: audit: type=1327 audit(1696273877.120:168): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:11:17.128983 kernel: audit: type=1131 audit(1696273877.120:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:17.138660 augenrules[1243]: No rules Oct 2 19:11:17.139279 systemd[1]: Finished audit-rules.service. Oct 2 19:11:17.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:17.140510 sudo[1222]: pam_unix(sudo:session): session closed for user root Oct 2 19:11:17.139000 audit[1222]: USER_END pid=1222 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:11:17.141807 sshd[1219]: pam_unix(sshd:session): session closed for user core Oct 2 19:11:17.144629 systemd[1]: sshd@5-10.0.0.65:22-10.0.0.1:44972.service: Deactivated successfully. Oct 2 19:11:17.144894 kernel: audit: type=1130 audit(1696273877.138:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:17.144997 kernel: audit: type=1106 audit(1696273877.139:171): pid=1222 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:11:17.145035 kernel: audit: type=1104 audit(1696273877.139:172): pid=1222 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:11:17.139000 audit[1222]: CRED_DISP pid=1222 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:11:17.145201 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:11:17.145783 systemd-logind[1117]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:11:17.146739 systemd[1]: Started sshd@6-10.0.0.65:22-10.0.0.1:44976.service. Oct 2 19:11:17.141000 audit[1219]: USER_END pid=1219 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:17.147911 systemd-logind[1117]: Removed session 6. Oct 2 19:11:17.150347 kernel: audit: type=1106 audit(1696273877.141:173): pid=1219 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:17.150395 kernel: audit: type=1104 audit(1696273877.141:174): pid=1219 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:17.141000 audit[1219]: CRED_DISP pid=1219 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:17.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.65:22-10.0.0.1:44972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:17.154824 kernel: audit: type=1131 audit(1696273877.144:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.65:22-10.0.0.1:44972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:17.146000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.65:22-10.0.0.1:44976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:17.182000 audit[1249]: USER_ACCT pid=1249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:17.183100 sshd[1249]: Accepted publickey for core from 10.0.0.1 port 44976 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:11:17.182000 audit[1249]: CRED_ACQ pid=1249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:17.182000 audit[1249]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd960800c0 a2=3 a3=0 items=0 ppid=1 pid=1249 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.182000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:11:17.184023 sshd[1249]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:11:17.187049 systemd-logind[1117]: New session 7 of user core. Oct 2 19:11:17.187922 systemd[1]: Started session-7.scope. Oct 2 19:11:17.190000 audit[1249]: USER_START pid=1249 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:17.191000 audit[1251]: CRED_ACQ pid=1251 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:11:17.237000 audit[1252]: USER_ACCT pid=1252 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:11:17.237000 audit[1252]: CRED_REFR pid=1252 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:11:17.238653 sudo[1252]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:11:17.238837 sudo[1252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:11:17.239000 audit[1252]: USER_START pid=1252 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:11:17.764936 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:11:17.769780 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:11:17.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:17.770092 systemd[1]: Reached target network-online.target. Oct 2 19:11:17.771224 systemd[1]: Starting docker.service... Oct 2 19:11:17.807266 env[1270]: time="2023-10-02T19:11:17.807222824Z" level=info msg="Starting up" Oct 2 19:11:17.808964 env[1270]: time="2023-10-02T19:11:17.808914266Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:11:17.808964 env[1270]: time="2023-10-02T19:11:17.808951776Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:11:17.809036 env[1270]: time="2023-10-02T19:11:17.808994015Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:11:17.809036 env[1270]: time="2023-10-02T19:11:17.809003663Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:11:17.810481 env[1270]: time="2023-10-02T19:11:17.810455366Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:11:17.810481 env[1270]: time="2023-10-02T19:11:17.810470174Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:11:17.810481 env[1270]: time="2023-10-02T19:11:17.810479862Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:11:17.810575 env[1270]: time="2023-10-02T19:11:17.810499178Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:11:17.843753 env[1270]: time="2023-10-02T19:11:17.843714919Z" level=info msg="Loading containers: start." Oct 2 19:11:17.882000 audit[1305]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1305 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.882000 audit[1305]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffe00a69db0 a2=0 a3=7ffe00a69d9c items=0 ppid=1270 pid=1305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.882000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:11:17.884000 audit[1307]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.884000 audit[1307]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc20017f70 a2=0 a3=7ffc20017f5c items=0 ppid=1270 pid=1307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.884000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:11:17.885000 audit[1309]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.885000 audit[1309]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffcdcada1a0 a2=0 a3=7ffcdcada18c items=0 ppid=1270 pid=1309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.885000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:11:17.887000 audit[1311]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.887000 audit[1311]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff47c91730 a2=0 a3=7fff47c9171c items=0 ppid=1270 pid=1311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.887000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:11:17.888000 audit[1313]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.888000 audit[1313]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd5fe24630 a2=0 a3=7ffd5fe2461c items=0 ppid=1270 pid=1313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.888000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:11:17.902000 audit[1318]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.902000 audit[1318]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe80148880 a2=0 a3=7ffe8014886c items=0 ppid=1270 pid=1318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.902000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:11:17.911000 audit[1320]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.911000 audit[1320]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff777faef0 a2=0 a3=7fff777faedc items=0 ppid=1270 pid=1320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.911000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:11:17.912000 audit[1322]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1322 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.912000 audit[1322]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffcbe5bc400 a2=0 a3=7ffcbe5bc3ec items=0 ppid=1270 pid=1322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.912000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:11:17.914000 audit[1324]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.914000 audit[1324]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff42d1d340 a2=0 a3=7fff42d1d32c items=0 ppid=1270 pid=1324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.914000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:11:17.921000 audit[1328]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.921000 audit[1328]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe36345e20 a2=0 a3=7ffe36345e0c items=0 ppid=1270 pid=1328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.921000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:11:17.922000 audit[1329]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.922000 audit[1329]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff7da2a220 a2=0 a3=7fff7da2a20c items=0 ppid=1270 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.922000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:11:17.929820 kernel: Initializing XFRM netlink socket Oct 2 19:11:17.959440 env[1270]: time="2023-10-02T19:11:17.959391053Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:11:17.975000 audit[1337]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1337 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.975000 audit[1337]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffec4369920 a2=0 a3=7ffec436990c items=0 ppid=1270 pid=1337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.975000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:11:17.987000 audit[1340]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1340 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.987000 audit[1340]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffda2d638e0 a2=0 a3=7ffda2d638cc items=0 ppid=1270 pid=1340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.987000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:11:17.989000 audit[1343]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.989000 audit[1343]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffeab396f60 a2=0 a3=7ffeab396f4c items=0 ppid=1270 pid=1343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.989000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:11:17.991000 audit[1345]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.991000 audit[1345]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fffec12e750 a2=0 a3=7fffec12e73c items=0 ppid=1270 pid=1345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.991000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:11:17.992000 audit[1347]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1347 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.992000 audit[1347]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffec58c79a0 a2=0 a3=7ffec58c798c items=0 ppid=1270 pid=1347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.992000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:11:17.994000 audit[1349]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1349 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.994000 audit[1349]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffde6fdcfd0 a2=0 a3=7ffde6fdcfbc items=0 ppid=1270 pid=1349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.994000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:11:17.996000 audit[1351]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1351 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:17.996000 audit[1351]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffe3232c110 a2=0 a3=7ffe3232c0fc items=0 ppid=1270 pid=1351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:17.996000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:11:18.002000 audit[1354]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1354 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:18.002000 audit[1354]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffe52720f20 a2=0 a3=7ffe52720f0c items=0 ppid=1270 pid=1354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:18.002000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:11:18.004000 audit[1356]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1356 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:18.004000 audit[1356]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffed37e2610 a2=0 a3=7ffed37e25fc items=0 ppid=1270 pid=1356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:18.004000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:11:18.005000 audit[1358]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1358 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:18.005000 audit[1358]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffc85a9dc70 a2=0 a3=7ffc85a9dc5c items=0 ppid=1270 pid=1358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:18.005000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:11:18.007000 audit[1360]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1360 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:18.007000 audit[1360]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdc76c7770 a2=0 a3=7ffdc76c775c items=0 ppid=1270 pid=1360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:18.007000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:11:18.008598 systemd-networkd[1035]: docker0: Link UP Oct 2 19:11:18.017000 audit[1364]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1364 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:18.017000 audit[1364]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffeba73b30 a2=0 a3=7fffeba73b1c items=0 ppid=1270 pid=1364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:18.017000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:11:18.018000 audit[1365]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1365 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:18.018000 audit[1365]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe9c00b6a0 a2=0 a3=7ffe9c00b68c items=0 ppid=1270 pid=1365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:18.018000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:11:18.019218 env[1270]: time="2023-10-02T19:11:18.019181332Z" level=info msg="Loading containers: done." Oct 2 19:11:18.026808 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3725468306-merged.mount: Deactivated successfully. Oct 2 19:11:18.032338 env[1270]: time="2023-10-02T19:11:18.032289414Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:11:18.032532 env[1270]: time="2023-10-02T19:11:18.032503586Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:11:18.032635 env[1270]: time="2023-10-02T19:11:18.032611748Z" level=info msg="Daemon has completed initialization" Oct 2 19:11:18.048542 systemd[1]: Started docker.service. Oct 2 19:11:18.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:18.055477 env[1270]: time="2023-10-02T19:11:18.055419742Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:11:18.071265 systemd[1]: Reloading. Oct 2 19:11:18.125132 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:11:18Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:11:18.125159 /usr/lib/systemd/system-generators/torcx-generator[1413]: time="2023-10-02T19:11:18Z" level=info msg="torcx already run" Oct 2 19:11:18.192617 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:11:18.192637 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:11:18.212913 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:11:18.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.270000 audit: BPF prog-id=37 op=LOAD Oct 2 19:11:18.270000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:11:18.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit: BPF prog-id=38 op=LOAD Oct 2 19:11:18.272000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit: BPF prog-id=39 op=LOAD Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.272000 audit: BPF prog-id=40 op=LOAD Oct 2 19:11:18.272000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:11:18.272000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:11:18.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.273000 audit: BPF prog-id=41 op=LOAD Oct 2 19:11:18.273000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit: BPF prog-id=42 op=LOAD Oct 2 19:11:18.274000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit: BPF prog-id=43 op=LOAD Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit: BPF prog-id=44 op=LOAD Oct 2 19:11:18.274000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:11:18.274000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.274000 audit: BPF prog-id=45 op=LOAD Oct 2 19:11:18.274000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:11:18.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.275000 audit: BPF prog-id=46 op=LOAD Oct 2 19:11:18.275000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit: BPF prog-id=47 op=LOAD Oct 2 19:11:18.276000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit: BPF prog-id=48 op=LOAD Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.276000 audit: BPF prog-id=49 op=LOAD Oct 2 19:11:18.276000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:11:18.276000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:11:18.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.278000 audit: BPF prog-id=50 op=LOAD Oct 2 19:11:18.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:18.278000 audit: BPF prog-id=51 op=LOAD Oct 2 19:11:18.278000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:11:18.278000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:11:18.285265 systemd[1]: Started kubelet.service. Oct 2 19:11:18.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:18.330720 kubelet[1453]: E1002 19:11:18.330651 1453 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:11:18.333380 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:11:18.333494 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:11:18.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:11:18.669939 env[1130]: time="2023-10-02T19:11:18.669812507Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 19:11:19.310898 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2399160405.mount: Deactivated successfully. Oct 2 19:11:21.120326 env[1130]: time="2023-10-02T19:11:21.120256955Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:21.121949 env[1130]: time="2023-10-02T19:11:21.121912690Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:21.123668 env[1130]: time="2023-10-02T19:11:21.123635241Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:21.125150 env[1130]: time="2023-10-02T19:11:21.125120677Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:21.125765 env[1130]: time="2023-10-02T19:11:21.125724549Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2\"" Oct 2 19:11:21.134431 env[1130]: time="2023-10-02T19:11:21.134385962Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 19:11:24.325092 env[1130]: time="2023-10-02T19:11:24.325031842Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:24.327963 env[1130]: time="2023-10-02T19:11:24.327926110Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:24.330245 env[1130]: time="2023-10-02T19:11:24.330216265Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:24.332492 env[1130]: time="2023-10-02T19:11:24.332437701Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:24.333246 env[1130]: time="2023-10-02T19:11:24.333222533Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c\"" Oct 2 19:11:24.342575 env[1130]: time="2023-10-02T19:11:24.342523776Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 19:11:28.230698 env[1130]: time="2023-10-02T19:11:28.230615285Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:28.404753 env[1130]: time="2023-10-02T19:11:28.404700637Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:28.584314 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:11:28.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:28.584545 systemd[1]: Stopped kubelet.service. Oct 2 19:11:28.585923 systemd[1]: Started kubelet.service. Oct 2 19:11:28.621343 kubelet[1489]: E1002 19:11:28.621286 1489 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:11:28.624116 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:11:28.624224 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:11:28.627191 kernel: kauditd_printk_skb: 259 callbacks suppressed Oct 2 19:11:28.627324 kernel: audit: type=1130 audit(1696273888.583:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:28.583000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:28.632659 kernel: audit: type=1131 audit(1696273888.583:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:28.632708 kernel: audit: type=1130 audit(1696273888.585:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:28.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:28.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:11:28.638040 kernel: audit: type=1131 audit(1696273888.623:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:11:28.657563 env[1130]: time="2023-10-02T19:11:28.657507310Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:28.865373 env[1130]: time="2023-10-02T19:11:28.865202022Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:28.866345 env[1130]: time="2023-10-02T19:11:28.866308146Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999\"" Oct 2 19:11:28.875802 env[1130]: time="2023-10-02T19:11:28.875736207Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 19:11:35.461833 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3043407366.mount: Deactivated successfully. Oct 2 19:11:36.762569 env[1130]: time="2023-10-02T19:11:36.762474346Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:36.776879 env[1130]: time="2023-10-02T19:11:36.776781057Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:36.780121 env[1130]: time="2023-10-02T19:11:36.780057160Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:36.783088 env[1130]: time="2023-10-02T19:11:36.783024455Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:36.783531 env[1130]: time="2023-10-02T19:11:36.783488155Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad\"" Oct 2 19:11:36.795903 env[1130]: time="2023-10-02T19:11:36.795839799Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:11:37.314346 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2859325485.mount: Deactivated successfully. Oct 2 19:11:37.320471 env[1130]: time="2023-10-02T19:11:37.320411518Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:37.322405 env[1130]: time="2023-10-02T19:11:37.322374709Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:37.324198 env[1130]: time="2023-10-02T19:11:37.324163354Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:37.325653 env[1130]: time="2023-10-02T19:11:37.325626668Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:37.326278 env[1130]: time="2023-10-02T19:11:37.326249747Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:11:37.334439 env[1130]: time="2023-10-02T19:11:37.334403628Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:11:38.315549 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1902191950.mount: Deactivated successfully. Oct 2 19:11:38.875503 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:11:38.875726 systemd[1]: Stopped kubelet.service. Oct 2 19:11:38.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:38.877262 systemd[1]: Started kubelet.service. Oct 2 19:11:38.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:38.885823 kernel: audit: type=1130 audit(1696273898.874:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:38.885933 kernel: audit: type=1131 audit(1696273898.874:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:38.885975 kernel: audit: type=1130 audit(1696273898.876:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:38.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:38.925991 kubelet[1514]: E1002 19:11:38.925932 1514 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:11:38.928381 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:11:38.928496 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:11:38.927000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:11:38.931839 kernel: audit: type=1131 audit(1696273898.927:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:11:45.535710 env[1130]: time="2023-10-02T19:11:45.535635183Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:45.599047 env[1130]: time="2023-10-02T19:11:45.598978370Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:45.646866 env[1130]: time="2023-10-02T19:11:45.646806217Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:45.679934 env[1130]: time="2023-10-02T19:11:45.679837985Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:45.681368 env[1130]: time="2023-10-02T19:11:45.680630737Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 19:11:45.699215 env[1130]: time="2023-10-02T19:11:45.699176112Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:11:46.458141 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount372545862.mount: Deactivated successfully. Oct 2 19:11:49.155898 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Oct 2 19:11:49.155000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:49.156074 systemd[1]: Stopped kubelet.service. Oct 2 19:11:49.157511 systemd[1]: Started kubelet.service. Oct 2 19:11:49.155000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:49.160454 kernel: audit: type=1130 audit(1696273909.155:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:49.160589 kernel: audit: type=1131 audit(1696273909.155:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:49.160610 kernel: audit: type=1130 audit(1696273909.156:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:49.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:49.196938 kubelet[1528]: E1002 19:11:49.196872 1528 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:11:49.198659 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:11:49.198814 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:11:49.198000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:11:49.237839 kernel: audit: type=1131 audit(1696273909.198:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:11:49.492511 env[1130]: time="2023-10-02T19:11:49.492364122Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:49.664929 env[1130]: time="2023-10-02T19:11:49.664875131Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:49.677774 env[1130]: time="2023-10-02T19:11:49.677720387Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:49.684456 env[1130]: time="2023-10-02T19:11:49.684394481Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:49.685021 env[1130]: time="2023-10-02T19:11:49.684980159Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:11:51.800755 systemd[1]: Stopped kubelet.service. Oct 2 19:11:51.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:51.800000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:51.805012 kernel: audit: type=1130 audit(1696273911.800:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:51.805064 kernel: audit: type=1131 audit(1696273911.800:398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:51.814246 systemd[1]: Reloading. Oct 2 19:11:51.862205 /usr/lib/systemd/system-generators/torcx-generator[1629]: time="2023-10-02T19:11:51Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:11:51.862522 /usr/lib/systemd/system-generators/torcx-generator[1629]: time="2023-10-02T19:11:51Z" level=info msg="torcx already run" Oct 2 19:11:51.960025 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:11:51.960040 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:11:51.976311 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:11:52.050207 kernel: audit: type=1400 audit(1696273912.041:399): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.050351 kernel: audit: type=1400 audit(1696273912.041:400): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.050379 kernel: audit: type=1400 audit(1696273912.041:401): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.050412 kernel: audit: type=1400 audit(1696273912.041:402): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.045000 audit: BPF prog-id=52 op=LOAD Oct 2 19:11:52.045000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:11:52.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.047000 audit: BPF prog-id=53 op=LOAD Oct 2 19:11:52.047000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:11:52.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.049000 audit: BPF prog-id=54 op=LOAD Oct 2 19:11:52.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.049000 audit: BPF prog-id=55 op=LOAD Oct 2 19:11:52.049000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:11:52.049000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit: BPF prog-id=56 op=LOAD Oct 2 19:11:52.051000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit: BPF prog-id=57 op=LOAD Oct 2 19:11:52.052000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit: BPF prog-id=58 op=LOAD Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit: BPF prog-id=59 op=LOAD Oct 2 19:11:52.052000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:11:52.052000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.053000 audit: BPF prog-id=60 op=LOAD Oct 2 19:11:52.053000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:11:52.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.053000 audit: BPF prog-id=61 op=LOAD Oct 2 19:11:52.053000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit: BPF prog-id=62 op=LOAD Oct 2 19:11:52.054000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit: BPF prog-id=63 op=LOAD Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.054000 audit: BPF prog-id=64 op=LOAD Oct 2 19:11:52.054000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:11:52.054000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit: BPF prog-id=65 op=LOAD Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.056000 audit: BPF prog-id=66 op=LOAD Oct 2 19:11:52.056000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:11:52.056000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:11:52.067543 systemd[1]: Started kubelet.service. Oct 2 19:11:52.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:52.108059 kubelet[1669]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:11:52.108426 kubelet[1669]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:11:52.108575 kubelet[1669]: I1002 19:11:52.108442 1669 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:11:52.109559 kubelet[1669]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:11:52.109559 kubelet[1669]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:11:52.384693 kubelet[1669]: I1002 19:11:52.384596 1669 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:11:52.384693 kubelet[1669]: I1002 19:11:52.384632 1669 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:11:52.384964 kubelet[1669]: I1002 19:11:52.384940 1669 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:11:52.388825 kubelet[1669]: I1002 19:11:52.388773 1669 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:11:52.389159 kubelet[1669]: E1002 19:11:52.389131 1669 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.65:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:52.393316 kubelet[1669]: I1002 19:11:52.393288 1669 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:11:52.393588 kubelet[1669]: I1002 19:11:52.393569 1669 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:11:52.393677 kubelet[1669]: I1002 19:11:52.393663 1669 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:11:52.393755 kubelet[1669]: I1002 19:11:52.393693 1669 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:11:52.393755 kubelet[1669]: I1002 19:11:52.393708 1669 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:11:52.393856 kubelet[1669]: I1002 19:11:52.393846 1669 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:11:52.396612 kubelet[1669]: I1002 19:11:52.396593 1669 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:11:52.396678 kubelet[1669]: I1002 19:11:52.396619 1669 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:11:52.396678 kubelet[1669]: I1002 19:11:52.396641 1669 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:11:52.396678 kubelet[1669]: I1002 19:11:52.396656 1669 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:11:52.400943 kubelet[1669]: I1002 19:11:52.400918 1669 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:11:52.401047 kubelet[1669]: W1002 19:11:52.400934 1669 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.65:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:52.401047 kubelet[1669]: E1002 19:11:52.400975 1669 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.65:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:52.401231 kubelet[1669]: W1002 19:11:52.401181 1669 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.65:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:52.401302 kubelet[1669]: E1002 19:11:52.401239 1669 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.65:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:52.401302 kubelet[1669]: W1002 19:11:52.401276 1669 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:11:52.401803 kubelet[1669]: I1002 19:11:52.401771 1669 server.go:1186] "Started kubelet" Oct 2 19:11:52.402000 kubelet[1669]: I1002 19:11:52.401988 1669 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:11:52.402593 kubelet[1669]: E1002 19:11:52.402476 1669 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6022d677d94a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 401746250, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 401746250, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.65:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.65:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:11:52.402756 kubelet[1669]: I1002 19:11:52.402741 1669 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:11:52.402914 kubelet[1669]: E1002 19:11:52.402888 1669 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:11:52.402965 kubelet[1669]: E1002 19:11:52.402919 1669 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:11:52.402000 audit[1669]: AVC avc: denied { mac_admin } for pid=1669 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.402000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:11:52.402000 audit[1669]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008bfe30 a1=c0007f15a8 a2=c0008bfdd0 a3=25 items=0 ppid=1 pid=1669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.402000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:11:52.402000 audit[1669]: AVC avc: denied { mac_admin } for pid=1669 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.402000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:11:52.402000 audit[1669]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b2b6c0 a1=c0007f15c0 a2=c0008bff50 a3=25 items=0 ppid=1 pid=1669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.402000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:11:52.403961 kubelet[1669]: I1002 19:11:52.403673 1669 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:11:52.403961 kubelet[1669]: I1002 19:11:52.403735 1669 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:11:52.403961 kubelet[1669]: I1002 19:11:52.403834 1669 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:11:52.403961 kubelet[1669]: I1002 19:11:52.403960 1669 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:11:52.404560 kubelet[1669]: E1002 19:11:52.404498 1669 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Oct 2 19:11:52.404746 kubelet[1669]: E1002 19:11:52.404723 1669 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.0.0.65:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:52.405156 kubelet[1669]: W1002 19:11:52.405109 1669 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.65:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:52.405156 kubelet[1669]: E1002 19:11:52.405158 1669 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.65:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:52.405300 kubelet[1669]: I1002 19:11:52.405259 1669 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:11:52.405000 audit[1681]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1681 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.405000 audit[1681]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffccd81c3f0 a2=0 a3=7ffccd81c3dc items=0 ppid=1669 pid=1681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.405000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:11:52.406000 audit[1682]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.406000 audit[1682]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff9baf20b0 a2=0 a3=7fff9baf209c items=0 ppid=1669 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.406000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:11:52.408000 audit[1684]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1684 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.408000 audit[1684]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd05a42820 a2=0 a3=7ffd05a4280c items=0 ppid=1669 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.408000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:11:52.409000 audit[1686]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1686 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.409000 audit[1686]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffbdcbba00 a2=0 a3=7fffbdcbb9ec items=0 ppid=1669 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.409000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:11:52.415000 audit[1691]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1691 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.415000 audit[1691]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc671d83d0 a2=0 a3=7ffc671d83bc items=0 ppid=1669 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.415000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:11:52.418000 audit[1693]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=1693 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.418000 audit[1693]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff26fa01f0 a2=0 a3=7fff26fa01dc items=0 ppid=1669 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.418000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:11:52.423000 audit[1699]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=1699 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.423000 audit[1699]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffdc53f3ad0 a2=0 a3=7ffdc53f3abc items=0 ppid=1669 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.423000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:11:52.425108 kubelet[1669]: I1002 19:11:52.425088 1669 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:11:52.425108 kubelet[1669]: I1002 19:11:52.425103 1669 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:11:52.425191 kubelet[1669]: I1002 19:11:52.425134 1669 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:11:52.427735 kubelet[1669]: I1002 19:11:52.427715 1669 policy_none.go:49] "None policy: Start" Oct 2 19:11:52.427000 audit[1702]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=1702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.427000 audit[1702]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffe6987a800 a2=0 a3=7ffe6987a7ec items=0 ppid=1669 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.427000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:11:52.428307 kubelet[1669]: I1002 19:11:52.428173 1669 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:11:52.428307 kubelet[1669]: I1002 19:11:52.428207 1669 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:11:52.428000 audit[1703]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1703 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.428000 audit[1703]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffeba953fc0 a2=0 a3=7ffeba953fac items=0 ppid=1669 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.428000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:11:52.428000 audit[1704]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1704 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.428000 audit[1704]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf3a1e970 a2=0 a3=7ffcf3a1e95c items=0 ppid=1669 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.428000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:11:52.430000 audit[1706]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=1706 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.430000 audit[1706]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffdfd7337d0 a2=0 a3=7ffdfd7337bc items=0 ppid=1669 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.430000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:11:52.432574 systemd[1]: Created slice kubepods.slice. Oct 2 19:11:52.432000 audit[1708]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=1708 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.432000 audit[1708]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fff1fea96a0 a2=0 a3=7fff1fea968c items=0 ppid=1669 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.432000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:11:52.436054 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:11:52.436000 audit[1710]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=1710 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.436000 audit[1710]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffe24d4b170 a2=0 a3=7ffe24d4b15c items=0 ppid=1669 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.436000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:11:52.437000 audit[1712]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=1712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.437000 audit[1712]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7fff184ab600 a2=0 a3=7fff184ab5ec items=0 ppid=1669 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.437000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:11:52.438644 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:11:52.439000 audit[1714]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=1714 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.439000 audit[1714]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7fff09718d90 a2=0 a3=7fff09718d7c items=0 ppid=1669 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.439000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:11:52.440776 kubelet[1669]: I1002 19:11:52.440752 1669 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:11:52.440000 audit[1715]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=1715 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:52.440000 audit[1715]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffeb9781730 a2=0 a3=7ffeb978171c items=0 ppid=1669 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.440000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:11:52.440000 audit[1716]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=1716 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.440000 audit[1716]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff1a1220f0 a2=0 a3=7fff1a1220dc items=0 ppid=1669 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.440000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:11:52.441000 audit[1717]: NETFILTER_CFG table=nat:43 family=10 entries=2 op=nft_register_chain pid=1717 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:52.441000 audit[1717]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd1eac3e10 a2=0 a3=7ffd1eac3dfc items=0 ppid=1669 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.441000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:11:52.441000 audit[1718]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=1718 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.441000 audit[1718]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffda8f30840 a2=0 a3=7ffda8f3082c items=0 ppid=1669 pid=1718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.441000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:11:52.442000 audit[1720]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=1720 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:11:52.442000 audit[1720]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff56a80d10 a2=0 a3=7fff56a80cfc items=0 ppid=1669 pid=1720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.442000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:11:52.443000 audit[1721]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=1721 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:52.443000 audit[1721]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffb7647f60 a2=0 a3=7fffb7647f4c items=0 ppid=1669 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.443000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:11:52.444526 kubelet[1669]: I1002 19:11:52.444504 1669 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:11:52.443000 audit[1669]: AVC avc: denied { mac_admin } for pid=1669 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:52.443000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:11:52.443000 audit[1669]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0006628d0 a1=c0003dbc50 a2=c0006628a0 a3=25 items=0 ppid=1 pid=1669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.443000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:11:52.443000 audit[1722]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=1722 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:52.443000 audit[1722]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffe78be5c20 a2=0 a3=7ffe78be5c0c items=0 ppid=1669 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.443000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:11:52.445692 kubelet[1669]: I1002 19:11:52.444550 1669 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:11:52.445692 kubelet[1669]: I1002 19:11:52.444974 1669 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:11:52.445692 kubelet[1669]: E1002 19:11:52.445469 1669 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Oct 2 19:11:52.445000 audit[1724]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=1724 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:52.445000 audit[1724]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7fff357d70b0 a2=0 a3=7fff357d709c items=0 ppid=1669 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.445000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:11:52.446000 audit[1725]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=1725 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:52.446000 audit[1725]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc2108a3c0 a2=0 a3=7ffc2108a3ac items=0 ppid=1669 pid=1725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.446000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:11:52.447000 audit[1726]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=1726 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:52.447000 audit[1726]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff3404aa80 a2=0 a3=7fff3404aa6c items=0 ppid=1669 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.447000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:11:52.449000 audit[1728]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=1728 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:52.449000 audit[1728]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe16fce130 a2=0 a3=7ffe16fce11c items=0 ppid=1669 pid=1728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.449000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:11:52.451000 audit[1730]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=1730 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:52.451000 audit[1730]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffe901c4bb0 a2=0 a3=7ffe901c4b9c items=0 ppid=1669 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.451000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:11:52.452000 audit[1732]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=1732 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:52.452000 audit[1732]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffe43829de0 a2=0 a3=7ffe43829dcc items=0 ppid=1669 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.452000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:11:52.454000 audit[1734]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=1734 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:52.454000 audit[1734]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7fff5a818a80 a2=0 a3=7fff5a818a6c items=0 ppid=1669 pid=1734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.454000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:11:52.456000 audit[1736]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=1736 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:52.456000 audit[1736]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7ffc49ec9b30 a2=0 a3=7ffc49ec9b1c items=0 ppid=1669 pid=1736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.456000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:11:52.457606 kubelet[1669]: I1002 19:11:52.457591 1669 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:11:52.457639 kubelet[1669]: I1002 19:11:52.457611 1669 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:11:52.457639 kubelet[1669]: I1002 19:11:52.457630 1669 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:11:52.457683 kubelet[1669]: E1002 19:11:52.457672 1669 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:11:52.458091 kubelet[1669]: W1002 19:11:52.458054 1669 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.65:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:52.458091 kubelet[1669]: E1002 19:11:52.458089 1669 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.65:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:52.457000 audit[1737]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=1737 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:52.457000 audit[1737]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe51447720 a2=0 a3=7ffe5144770c items=0 ppid=1669 pid=1737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.457000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:11:52.458000 audit[1738]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=1738 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:52.458000 audit[1738]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff12b9bc0 a2=0 a3=7ffff12b9bac items=0 ppid=1669 pid=1738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.458000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:11:52.458000 audit[1739]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=1739 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:11:52.458000 audit[1739]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd69dae670 a2=0 a3=7ffd69dae65c items=0 ppid=1669 pid=1739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:52.458000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:11:52.506245 kubelet[1669]: I1002 19:11:52.506209 1669 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:11:52.506600 kubelet[1669]: E1002 19:11:52.506582 1669 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.65:6443/api/v1/nodes\": dial tcp 10.0.0.65:6443: connect: connection refused" node="localhost" Oct 2 19:11:52.558854 kubelet[1669]: I1002 19:11:52.558780 1669 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:11:52.559867 kubelet[1669]: I1002 19:11:52.559849 1669 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:11:52.560467 kubelet[1669]: I1002 19:11:52.560452 1669 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:11:52.560822 kubelet[1669]: I1002 19:11:52.560810 1669 status_manager.go:698] "Failed to get status for pod" podUID=388d2d7243727dbf1c36de258c7ae8d5 pod="kube-system/kube-apiserver-localhost" err="Get \"https://10.0.0.65:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-localhost\": dial tcp 10.0.0.65:6443: connect: connection refused" Oct 2 19:11:52.561705 kubelet[1669]: I1002 19:11:52.561689 1669 status_manager.go:698] "Failed to get status for pod" podUID=b3fbb6a05b0456c4809ee638aa5cfabe pod="kube-system/kube-controller-manager-localhost" err="Get \"https://10.0.0.65:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-localhost\": dial tcp 10.0.0.65:6443: connect: connection refused" Oct 2 19:11:52.561850 kubelet[1669]: I1002 19:11:52.561838 1669 status_manager.go:698] "Failed to get status for pod" podUID=fbbee22b6941d370b4e7de3cf42df07f pod="kube-system/kube-scheduler-localhost" err="Get \"https://10.0.0.65:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-localhost\": dial tcp 10.0.0.65:6443: connect: connection refused" Oct 2 19:11:52.564678 systemd[1]: Created slice kubepods-burstable-pod388d2d7243727dbf1c36de258c7ae8d5.slice. Oct 2 19:11:52.576152 systemd[1]: Created slice kubepods-burstable-podb3fbb6a05b0456c4809ee638aa5cfabe.slice. Oct 2 19:11:52.583686 systemd[1]: Created slice kubepods-burstable-podfbbee22b6941d370b4e7de3cf42df07f.slice. Oct 2 19:11:52.605225 kubelet[1669]: E1002 19:11:52.605176 1669 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.0.0.65:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:52.706846 kubelet[1669]: I1002 19:11:52.706801 1669 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:11:52.707046 kubelet[1669]: I1002 19:11:52.707031 1669 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:11:52.707165 kubelet[1669]: I1002 19:11:52.707135 1669 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:11:52.707165 kubelet[1669]: I1002 19:11:52.707164 1669 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:11:52.707165 kubelet[1669]: I1002 19:11:52.707183 1669 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fbbee22b6941d370b4e7de3cf42df07f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fbbee22b6941d370b4e7de3cf42df07f\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:11:52.707444 kubelet[1669]: I1002 19:11:52.707199 1669 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/388d2d7243727dbf1c36de258c7ae8d5-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"388d2d7243727dbf1c36de258c7ae8d5\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:11:52.707444 kubelet[1669]: I1002 19:11:52.707218 1669 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/388d2d7243727dbf1c36de258c7ae8d5-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"388d2d7243727dbf1c36de258c7ae8d5\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:11:52.707444 kubelet[1669]: I1002 19:11:52.707285 1669 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/388d2d7243727dbf1c36de258c7ae8d5-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"388d2d7243727dbf1c36de258c7ae8d5\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:11:52.707444 kubelet[1669]: I1002 19:11:52.707325 1669 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:11:52.707662 kubelet[1669]: I1002 19:11:52.707644 1669 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:11:52.708122 kubelet[1669]: E1002 19:11:52.708087 1669 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.65:6443/api/v1/nodes\": dial tcp 10.0.0.65:6443: connect: connection refused" node="localhost" Oct 2 19:11:52.874923 kubelet[1669]: E1002 19:11:52.874875 1669 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:52.875702 env[1130]: time="2023-10-02T19:11:52.875646566Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:388d2d7243727dbf1c36de258c7ae8d5,Namespace:kube-system,Attempt:0,}" Oct 2 19:11:52.882200 kubelet[1669]: E1002 19:11:52.882052 1669 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:52.882690 env[1130]: time="2023-10-02T19:11:52.882648574Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:b3fbb6a05b0456c4809ee638aa5cfabe,Namespace:kube-system,Attempt:0,}" Oct 2 19:11:52.885934 kubelet[1669]: E1002 19:11:52.885908 1669 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:52.886395 env[1130]: time="2023-10-02T19:11:52.886350269Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fbbee22b6941d370b4e7de3cf42df07f,Namespace:kube-system,Attempt:0,}" Oct 2 19:11:53.006773 kubelet[1669]: E1002 19:11:53.006622 1669 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.0.0.65:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:53.110047 kubelet[1669]: I1002 19:11:53.110023 1669 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:11:53.110390 kubelet[1669]: E1002 19:11:53.110365 1669 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.65:6443/api/v1/nodes\": dial tcp 10.0.0.65:6443: connect: connection refused" node="localhost" Oct 2 19:11:53.365212 kubelet[1669]: W1002 19:11:53.365064 1669 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.65:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:53.365212 kubelet[1669]: E1002 19:11:53.365133 1669 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.65:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:53.426941 update_engine[1120]: I1002 19:11:53.426872 1120 update_attempter.cc:505] Updating boot flags... Oct 2 19:11:53.521522 kubelet[1669]: W1002 19:11:53.521415 1669 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.65:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:53.521522 kubelet[1669]: E1002 19:11:53.521517 1669 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.65:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:53.808150 kubelet[1669]: E1002 19:11:53.808092 1669 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.0.0.65:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:53.911745 kubelet[1669]: I1002 19:11:53.911707 1669 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:11:53.912055 kubelet[1669]: E1002 19:11:53.912027 1669 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.65:6443/api/v1/nodes\": dial tcp 10.0.0.65:6443: connect: connection refused" node="localhost" Oct 2 19:11:53.930615 kubelet[1669]: W1002 19:11:53.930564 1669 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.65:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:53.930615 kubelet[1669]: E1002 19:11:53.930614 1669 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.65:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:53.973070 kubelet[1669]: W1002 19:11:53.973006 1669 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.65:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:53.973070 kubelet[1669]: E1002 19:11:53.973065 1669 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.65:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:54.409717 kubelet[1669]: E1002 19:11:54.409676 1669 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.65:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:55.241317 kubelet[1669]: W1002 19:11:55.241269 1669 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.65:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:55.241317 kubelet[1669]: E1002 19:11:55.241305 1669 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.65:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:55.409145 kubelet[1669]: E1002 19:11:55.409078 1669 controller.go:146] failed to ensure lease exists, will retry in 3.2s, error: Get "https://10.0.0.65:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:55.453884 kubelet[1669]: W1002 19:11:55.453839 1669 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.65:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:55.453884 kubelet[1669]: E1002 19:11:55.453879 1669 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.65:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:55.463778 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3153423048.mount: Deactivated successfully. Oct 2 19:11:55.513970 kubelet[1669]: I1002 19:11:55.513885 1669 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:11:55.514285 kubelet[1669]: E1002 19:11:55.514266 1669 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.65:6443/api/v1/nodes\": dial tcp 10.0.0.65:6443: connect: connection refused" node="localhost" Oct 2 19:11:55.796999 env[1130]: time="2023-10-02T19:11:55.796503967Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:55.833075 env[1130]: time="2023-10-02T19:11:55.833018037Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:55.836813 env[1130]: time="2023-10-02T19:11:55.836775449Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:55.838768 env[1130]: time="2023-10-02T19:11:55.838706045Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:55.844515 env[1130]: time="2023-10-02T19:11:55.844461732Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:55.846487 env[1130]: time="2023-10-02T19:11:55.846450297Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:55.847827 env[1130]: time="2023-10-02T19:11:55.847807504Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:55.850305 env[1130]: time="2023-10-02T19:11:55.850257094Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:55.852030 env[1130]: time="2023-10-02T19:11:55.851994001Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:55.854095 env[1130]: time="2023-10-02T19:11:55.854063029Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:55.858970 env[1130]: time="2023-10-02T19:11:55.858905943Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:55.860412 env[1130]: time="2023-10-02T19:11:55.860361226Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:11:55.905958 env[1130]: time="2023-10-02T19:11:55.905893526Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:11:55.905958 env[1130]: time="2023-10-02T19:11:55.905924665Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:11:55.905958 env[1130]: time="2023-10-02T19:11:55.905933553Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:11:55.906284 env[1130]: time="2023-10-02T19:11:55.906258289Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6843ea5b646658a4ca426914029b57d7ea3120a0481f488faa755764b810a577 pid=1772 runtime=io.containerd.runc.v2 Oct 2 19:11:55.914031 env[1130]: time="2023-10-02T19:11:55.913958407Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:11:55.914157 env[1130]: time="2023-10-02T19:11:55.913999505Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:11:55.914157 env[1130]: time="2023-10-02T19:11:55.914029101Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:11:55.914266 env[1130]: time="2023-10-02T19:11:55.914236274Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8f305e6633d13d2a852f8e7e1aa252c5119cb5b370e0aa1541f58e32dc5bc798 pid=1786 runtime=io.containerd.runc.v2 Oct 2 19:11:55.926305 env[1130]: time="2023-10-02T19:11:55.926210576Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:11:55.926305 env[1130]: time="2023-10-02T19:11:55.926252316Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:11:55.926305 env[1130]: time="2023-10-02T19:11:55.926262204Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:11:55.926530 env[1130]: time="2023-10-02T19:11:55.926370791Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dbd74b8cfddd47978a3af41dc42b89cfb0f543771a6d7cdf7c5acc7d142e9132 pid=1762 runtime=io.containerd.runc.v2 Oct 2 19:11:55.930947 systemd[1]: Started cri-containerd-6843ea5b646658a4ca426914029b57d7ea3120a0481f488faa755764b810a577.scope. Oct 2 19:11:55.949066 systemd[1]: Started cri-containerd-8f305e6633d13d2a852f8e7e1aa252c5119cb5b370e0aa1541f58e32dc5bc798.scope. Oct 2 19:11:55.968498 kernel: kauditd_printk_skb: 280 callbacks suppressed Oct 2 19:11:55.968680 kernel: audit: type=1400 audit(1696273915.954:608): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.968727 kernel: audit: type=1400 audit(1696273915.954:609): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.968749 kernel: audit: type=1400 audit(1696273915.954:610): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.968763 kernel: audit: type=1400 audit(1696273915.954:611): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.968779 kernel: audit: type=1400 audit(1696273915.954:612): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.968804 kernel: audit: type=1400 audit(1696273915.954:613): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.973294 kernel: audit: type=1400 audit(1696273915.954:614): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.973391 kernel: audit: type=1400 audit(1696273915.954:615): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.975700 kernel: audit: type=1400 audit(1696273915.954:616): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.995000 audit: BPF prog-id=67 op=LOAD Oct 2 19:11:55.997000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.997000 audit[1788]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1772 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:55.997000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638343365613562363436363538613463613432363931343032396235 Oct 2 19:11:55.997000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.997000 audit[1788]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1772 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:55.997000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638343365613562363436363538613463613432363931343032396235 Oct 2 19:11:55.997000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.997000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.997000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.997000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.997000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.997000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.997000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.997000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.997000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.000858 kernel: audit: type=1400 audit(1696273915.995:617): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.997000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.997000 audit: BPF prog-id=68 op=LOAD Oct 2 19:11:55.997000 audit[1788]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003cab80 items=0 ppid=1772 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:55.997000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638343365613562363436363538613463613432363931343032396235 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit: BPF prog-id=69 op=LOAD Oct 2 19:11:55.998000 audit[1788]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003cabc8 items=0 ppid=1772 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:55.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638343365613562363436363538613463613432363931343032396235 Oct 2 19:11:55.998000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:11:55.998000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { perfmon } for pid=1788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit[1788]: AVC avc: denied { bpf } for pid=1788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:55.998000 audit: BPF prog-id=70 op=LOAD Oct 2 19:11:55.998000 audit[1788]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003cafd8 items=0 ppid=1772 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:55.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638343365613562363436363538613463613432363931343032396235 Oct 2 19:11:56.003431 systemd[1]: Started cri-containerd-dbd74b8cfddd47978a3af41dc42b89cfb0f543771a6d7cdf7c5acc7d142e9132.scope. Oct 2 19:11:56.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.019000 audit: BPF prog-id=71 op=LOAD Oct 2 19:11:56.019000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.019000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1786 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866333035653636333364313364326138353266386537653161613235 Oct 2 19:11:56.019000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.019000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1786 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866333035653636333364313364326138353266386537653161613235 Oct 2 19:11:56.020000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.020000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.020000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.020000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.020000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.020000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.020000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.020000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.020000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.020000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.020000 audit: BPF prog-id=72 op=LOAD Oct 2 19:11:56.020000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003dc8a0 items=0 ppid=1786 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.020000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866333035653636333364313364326138353266386537653161613235 Oct 2 19:11:56.024000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.024000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.024000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.024000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.024000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.024000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.024000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.024000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.024000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.024000 audit: BPF prog-id=73 op=LOAD Oct 2 19:11:56.024000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003dc8e8 items=0 ppid=1786 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866333035653636333364313364326138353266386537653161613235 Oct 2 19:11:56.025000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:11:56.025000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:11:56.025000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.025000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.025000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.025000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.025000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.025000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.025000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.025000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.025000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.025000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.025000 audit: BPF prog-id=74 op=LOAD Oct 2 19:11:56.025000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003dccf8 items=0 ppid=1786 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866333035653636333364313364326138353266386537653161613235 Oct 2 19:11:56.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.042000 audit: BPF prog-id=75 op=LOAD Oct 2 19:11:56.043000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.043000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1762 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462643734623863666464643437393738613361663431646334326238 Oct 2 19:11:56.043000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.043000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1762 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462643734623863666464643437393738613361663431646334326238 Oct 2 19:11:56.043000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.043000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.043000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.043000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.043000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.043000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.043000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.043000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.043000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.043000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.043000 audit: BPF prog-id=76 op=LOAD Oct 2 19:11:56.043000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000310360 items=0 ppid=1762 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462643734623863666464643437393738613361663431646334326238 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit: BPF prog-id=77 op=LOAD Oct 2 19:11:56.044000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003103a8 items=0 ppid=1762 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462643734623863666464643437393738613361663431646334326238 Oct 2 19:11:56.044000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:11:56.044000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.044000 audit: BPF prog-id=78 op=LOAD Oct 2 19:11:56.044000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003107b8 items=0 ppid=1762 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462643734623863666464643437393738613361663431646334326238 Oct 2 19:11:56.056344 env[1130]: time="2023-10-02T19:11:56.052984851Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:388d2d7243727dbf1c36de258c7ae8d5,Namespace:kube-system,Attempt:0,} returns sandbox id \"6843ea5b646658a4ca426914029b57d7ea3120a0481f488faa755764b810a577\"" Oct 2 19:11:56.057491 kubelet[1669]: E1002 19:11:56.057466 1669 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:56.063645 env[1130]: time="2023-10-02T19:11:56.063604576Z" level=info msg="CreateContainer within sandbox \"6843ea5b646658a4ca426914029b57d7ea3120a0481f488faa755764b810a577\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:11:56.070358 env[1130]: time="2023-10-02T19:11:56.070312071Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:b3fbb6a05b0456c4809ee638aa5cfabe,Namespace:kube-system,Attempt:0,} returns sandbox id \"8f305e6633d13d2a852f8e7e1aa252c5119cb5b370e0aa1541f58e32dc5bc798\"" Oct 2 19:11:56.070944 kubelet[1669]: E1002 19:11:56.070918 1669 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:56.072812 env[1130]: time="2023-10-02T19:11:56.072758772Z" level=info msg="CreateContainer within sandbox \"8f305e6633d13d2a852f8e7e1aa252c5119cb5b370e0aa1541f58e32dc5bc798\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:11:56.078327 env[1130]: time="2023-10-02T19:11:56.078279645Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:fbbee22b6941d370b4e7de3cf42df07f,Namespace:kube-system,Attempt:0,} returns sandbox id \"dbd74b8cfddd47978a3af41dc42b89cfb0f543771a6d7cdf7c5acc7d142e9132\"" Oct 2 19:11:56.078992 kubelet[1669]: E1002 19:11:56.078973 1669 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:56.080473 env[1130]: time="2023-10-02T19:11:56.080430285Z" level=info msg="CreateContainer within sandbox \"dbd74b8cfddd47978a3af41dc42b89cfb0f543771a6d7cdf7c5acc7d142e9132\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:11:56.249563 env[1130]: time="2023-10-02T19:11:56.249495937Z" level=info msg="CreateContainer within sandbox \"6843ea5b646658a4ca426914029b57d7ea3120a0481f488faa755764b810a577\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"33a52721863753eaa931ef97442cf46e5001707d2bb10d75b17fd6d963da3795\"" Oct 2 19:11:56.250208 env[1130]: time="2023-10-02T19:11:56.250167271Z" level=info msg="StartContainer for \"33a52721863753eaa931ef97442cf46e5001707d2bb10d75b17fd6d963da3795\"" Oct 2 19:11:56.256694 env[1130]: time="2023-10-02T19:11:56.256626354Z" level=info msg="CreateContainer within sandbox \"8f305e6633d13d2a852f8e7e1aa252c5119cb5b370e0aa1541f58e32dc5bc798\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"fbca88cfab8d5eff2e8330e16a16c1c133c65461c11d1870bd492363f6a55537\"" Oct 2 19:11:56.257383 env[1130]: time="2023-10-02T19:11:56.257333916Z" level=info msg="StartContainer for \"fbca88cfab8d5eff2e8330e16a16c1c133c65461c11d1870bd492363f6a55537\"" Oct 2 19:11:56.258118 env[1130]: time="2023-10-02T19:11:56.258083227Z" level=info msg="CreateContainer within sandbox \"dbd74b8cfddd47978a3af41dc42b89cfb0f543771a6d7cdf7c5acc7d142e9132\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"390871191417f22bbaf4038e705b3ce281a81ae93103fc237ac1d0e235f98001\"" Oct 2 19:11:56.258563 env[1130]: time="2023-10-02T19:11:56.258538681Z" level=info msg="StartContainer for \"390871191417f22bbaf4038e705b3ce281a81ae93103fc237ac1d0e235f98001\"" Oct 2 19:11:56.266385 systemd[1]: Started cri-containerd-33a52721863753eaa931ef97442cf46e5001707d2bb10d75b17fd6d963da3795.scope. Oct 2 19:11:56.278915 systemd[1]: Started cri-containerd-390871191417f22bbaf4038e705b3ce281a81ae93103fc237ac1d0e235f98001.scope. Oct 2 19:11:56.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.282000 audit: BPF prog-id=79 op=LOAD Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1772 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.283000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333613532373231383633373533656161393331656639373434326366 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1772 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.283000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333613532373231383633373533656161393331656639373434326366 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit: BPF prog-id=80 op=LOAD Oct 2 19:11:56.283000 audit[1886]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000210900 items=0 ppid=1772 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.283000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333613532373231383633373533656161393331656639373434326366 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.283000 audit: BPF prog-id=81 op=LOAD Oct 2 19:11:56.283000 audit[1886]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000210948 items=0 ppid=1772 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.283000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333613532373231383633373533656161393331656639373434326366 Oct 2 19:11:56.283000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:11:56.284000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:11:56.284000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.284000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.284000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.284000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.284000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.284000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.284000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.284000 audit[1886]: AVC avc: denied { perfmon } for pid=1886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.284000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.284000 audit[1886]: AVC avc: denied { bpf } for pid=1886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.284000 audit: BPF prog-id=82 op=LOAD Oct 2 19:11:56.284000 audit[1886]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000210d58 items=0 ppid=1772 pid=1886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333613532373231383633373533656161393331656639373434326366 Oct 2 19:11:56.286004 systemd[1]: Started cri-containerd-fbca88cfab8d5eff2e8330e16a16c1c133c65461c11d1870bd492363f6a55537.scope. Oct 2 19:11:56.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.296000 audit: BPF prog-id=83 op=LOAD Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { bpf } for pid=1916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1786 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662636138386366616238643565666632653833333065313661313663 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { perfmon } for pid=1916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=1786 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662636138386366616238643565666632653833333065313661313663 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { bpf } for pid=1916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { bpf } for pid=1916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { bpf } for pid=1916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { perfmon } for pid=1916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { perfmon } for pid=1916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { perfmon } for pid=1916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { perfmon } for pid=1916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { perfmon } for pid=1916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { bpf } for pid=1916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { bpf } for pid=1916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit: BPF prog-id=84 op=LOAD Oct 2 19:11:56.297000 audit[1916]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00030c7e0 items=0 ppid=1786 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662636138386366616238643565666632653833333065313661313663 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { bpf } for pid=1916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { bpf } for pid=1916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { perfmon } for pid=1916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { perfmon } for pid=1916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { perfmon } for pid=1916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { perfmon } for pid=1916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { perfmon } for pid=1916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { bpf } for pid=1916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { bpf } for pid=1916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit: BPF prog-id=85 op=LOAD Oct 2 19:11:56.297000 audit[1916]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00030c828 items=0 ppid=1786 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662636138386366616238643565666632653833333065313661313663 Oct 2 19:11:56.297000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:11:56.297000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { bpf } for pid=1916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { bpf } for pid=1916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { bpf } for pid=1916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { perfmon } for pid=1916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { perfmon } for pid=1916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { perfmon } for pid=1916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { perfmon } for pid=1916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { perfmon } for pid=1916 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { bpf } for pid=1916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1916]: AVC avc: denied { bpf } for pid=1916 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit: BPF prog-id=86 op=LOAD Oct 2 19:11:56.297000 audit[1916]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00030cc38 items=0 ppid=1786 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662636138386366616238643565666632653833333065313661313663 Oct 2 19:11:56.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.298000 audit: BPF prog-id=87 op=LOAD Oct 2 19:11:56.299000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.299000 audit[1910]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1762 pid=1910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339303837313139313431376632326262616634303338653730356233 Oct 2 19:11:56.300000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.300000 audit[1910]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1762 pid=1910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339303837313139313431376632326262616634303338653730356233 Oct 2 19:11:56.300000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.300000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.300000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.300000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.300000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.300000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.300000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.300000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.300000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.300000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.300000 audit: BPF prog-id=88 op=LOAD Oct 2 19:11:56.300000 audit[1910]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002867d0 items=0 ppid=1762 pid=1910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339303837313139313431376632326262616634303338653730356233 Oct 2 19:11:56.301000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.301000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.301000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.301000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.301000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.301000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.301000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.301000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.301000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.301000 audit: BPF prog-id=89 op=LOAD Oct 2 19:11:56.301000 audit[1910]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000286818 items=0 ppid=1762 pid=1910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339303837313139313431376632326262616634303338653730356233 Oct 2 19:11:56.303000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:11:56.303000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:11:56.303000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.303000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.303000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.303000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.303000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.303000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.303000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.303000 audit[1910]: AVC avc: denied { perfmon } for pid=1910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.303000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.303000 audit[1910]: AVC avc: denied { bpf } for pid=1910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:11:56.303000 audit: BPF prog-id=90 op=LOAD Oct 2 19:11:56.303000 audit[1910]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000286c28 items=0 ppid=1762 pid=1910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:56.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339303837313139313431376632326262616634303338653730356233 Oct 2 19:11:56.404377 kubelet[1669]: W1002 19:11:56.404199 1669 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.65:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:56.404377 kubelet[1669]: E1002 19:11:56.404260 1669 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.65:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.65:6443: connect: connection refused Oct 2 19:11:56.498397 env[1130]: time="2023-10-02T19:11:56.498331653Z" level=info msg="StartContainer for \"33a52721863753eaa931ef97442cf46e5001707d2bb10d75b17fd6d963da3795\" returns successfully" Oct 2 19:11:56.748450 env[1130]: time="2023-10-02T19:11:56.748403583Z" level=info msg="StartContainer for \"fbca88cfab8d5eff2e8330e16a16c1c133c65461c11d1870bd492363f6a55537\" returns successfully" Oct 2 19:11:56.749373 env[1130]: time="2023-10-02T19:11:56.749355839Z" level=info msg="StartContainer for \"390871191417f22bbaf4038e705b3ce281a81ae93103fc237ac1d0e235f98001\" returns successfully" Oct 2 19:11:56.753928 kubelet[1669]: E1002 19:11:56.753914 1669 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:56.756360 kubelet[1669]: E1002 19:11:56.756348 1669 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:57.355000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:57.355000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0002e4020 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:11:57.355000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:57.381000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:57.381000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00120c000 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:11:57.381000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:57.758130 kubelet[1669]: E1002 19:11:57.758103 1669 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:57.758529 kubelet[1669]: E1002 19:11:57.758128 1669 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:57.758529 kubelet[1669]: E1002 19:11:57.758213 1669 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:58.187000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:58.187000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c000fd6030 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:11:58.187000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:11:58.187000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:58.187000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=47 a1=c001a66020 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:11:58.187000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:11:58.187000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:58.187000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c000fd6120 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:11:58.187000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:11:58.189000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:58.189000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c001f8fa70 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:11:58.189000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:11:58.190000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:58.190000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c000af4d00 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:11:58.190000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:11:58.190000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:58.190000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c0036c48a0 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:11:58.190000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:11:58.355491 kubelet[1669]: E1002 19:11:58.355404 1669 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6022d677d94a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 401746250, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 401746250, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:11:58.400862 kubelet[1669]: I1002 19:11:58.400832 1669 apiserver.go:52] "Watching apiserver" Oct 2 19:11:58.406332 kubelet[1669]: I1002 19:11:58.406298 1669 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:11:58.409702 kubelet[1669]: E1002 19:11:58.409613 1669 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6022d6899ed8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 402910936, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 402910936, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:11:58.463140 kubelet[1669]: E1002 19:11:58.462986 1669 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6022d7d4859c", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node localhost status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 424596892, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 424596892, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:11:58.471170 kubelet[1669]: I1002 19:11:58.471142 1669 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:11:58.515942 kubelet[1669]: E1002 19:11:58.515867 1669 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6022d7d49956", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node localhost status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 424601942, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 424601942, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:11:58.569638 kubelet[1669]: E1002 19:11:58.569554 1669 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6022d7d4a74f", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node localhost status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 424605519, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 424605519, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:11:58.571725 kubelet[1669]: E1002 19:11:58.571690 1669 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "localhost" not found Oct 2 19:11:58.612545 kubelet[1669]: E1002 19:11:58.612511 1669 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Oct 2 19:11:58.622884 kubelet[1669]: E1002 19:11:58.622782 1669 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6022d9145d0c", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 445558028, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 445558028, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:11:58.677527 kubelet[1669]: E1002 19:11:58.677444 1669 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6022d7d4859c", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node localhost status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 424596892, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 506152661, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:11:58.715852 kubelet[1669]: I1002 19:11:58.715764 1669 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:11:58.732452 kubelet[1669]: E1002 19:11:58.732352 1669 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6022d7d49956", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node localhost status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 424601942, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 506166397, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:11:58.759340 kubelet[1669]: E1002 19:11:58.759315 1669 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:58.759693 kubelet[1669]: E1002 19:11:58.759405 1669 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:11:58.806737 kubelet[1669]: E1002 19:11:58.806642 1669 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6022d7d4a74f", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node localhost status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 424605519, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 506172338, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:11:59.009624 kubelet[1669]: E1002 19:11:59.009470 1669 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6022d7d4859c", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node localhost status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 424596892, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 559772369, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:11:59.010867 kubelet[1669]: I1002 19:11:59.010838 1669 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:11:59.409665 kubelet[1669]: E1002 19:11:59.409569 1669 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.178a6022d7d49956", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node localhost status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 424601942, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 11, 52, 559780234, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:11:59.813663 kubelet[1669]: E1002 19:11:59.813559 1669 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:00.760725 kubelet[1669]: E1002 19:12:00.760692 1669 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:01.043879 systemd[1]: Reloading. Oct 2 19:12:01.062000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:01.066270 kernel: kauditd_printk_skb: 356 callbacks suppressed Oct 2 19:12:01.066339 kernel: audit: type=1400 audit(1696273921.062:724): avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:01.066509 kernel: audit: type=1300 audit(1696273921.062:724): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0003937e0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:12:01.062000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0003937e0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:12:01.074073 kernel: audit: type=1327 audit(1696273921.062:724): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:01.062000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:01.062000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:01.082934 kernel: audit: type=1400 audit(1696273921.062:725): avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:01.083014 kernel: audit: type=1300 audit(1696273921.062:725): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000393820 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:12:01.062000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000393820 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:12:01.062000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:01.087621 kernel: audit: type=1327 audit(1696273921.062:725): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:01.087695 kernel: audit: type=1400 audit(1696273921.062:726): avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:01.062000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:01.062000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000393860 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:12:01.094395 kernel: audit: type=1300 audit(1696273921.062:726): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000393860 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:12:01.062000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:01.097240 kernel: audit: type=1327 audit(1696273921.062:726): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:01.097342 kernel: audit: type=1400 audit(1696273921.062:727): avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:01.062000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:01.062000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0003938a0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:12:01.062000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:01.127174 /usr/lib/systemd/system-generators/torcx-generator[2016]: time="2023-10-02T19:12:01Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:12:01.127198 /usr/lib/systemd/system-generators/torcx-generator[2016]: time="2023-10-02T19:12:01Z" level=info msg="torcx already run" Oct 2 19:12:01.189879 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:12:01.189895 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:12:01.206959 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:12:01.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.274000 audit: BPF prog-id=91 op=LOAD Oct 2 19:12:01.274000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:12:01.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.275000 audit: BPF prog-id=92 op=LOAD Oct 2 19:12:01.275000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit: BPF prog-id=93 op=LOAD Oct 2 19:12:01.276000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.276000 audit: BPF prog-id=94 op=LOAD Oct 2 19:12:01.276000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit: BPF prog-id=95 op=LOAD Oct 2 19:12:01.278000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit: BPF prog-id=96 op=LOAD Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.278000 audit: BPF prog-id=97 op=LOAD Oct 2 19:12:01.278000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:12:01.278000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit: BPF prog-id=98 op=LOAD Oct 2 19:12:01.280000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit: BPF prog-id=99 op=LOAD Oct 2 19:12:01.281000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit: BPF prog-id=100 op=LOAD Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.281000 audit: BPF prog-id=101 op=LOAD Oct 2 19:12:01.281000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:12:01.281000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:12:01.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.282000 audit: BPF prog-id=102 op=LOAD Oct 2 19:12:01.282000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit: BPF prog-id=103 op=LOAD Oct 2 19:12:01.283000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit: BPF prog-id=104 op=LOAD Oct 2 19:12:01.284000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit: BPF prog-id=105 op=LOAD Oct 2 19:12:01.284000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit: BPF prog-id=106 op=LOAD Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.284000 audit: BPF prog-id=107 op=LOAD Oct 2 19:12:01.284000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:12:01.284000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit: BPF prog-id=108 op=LOAD Oct 2 19:12:01.286000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit: BPF prog-id=109 op=LOAD Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.286000 audit: BPF prog-id=110 op=LOAD Oct 2 19:12:01.286000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:12:01.286000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:12:01.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.288000 audit: BPF prog-id=111 op=LOAD Oct 2 19:12:01.288000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:12:01.298198 systemd[1]: Stopping kubelet.service... Oct 2 19:12:01.321211 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:12:01.321458 systemd[1]: Stopped kubelet.service. Oct 2 19:12:01.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:01.323862 systemd[1]: Started kubelet.service. Oct 2 19:12:01.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:01.364048 kubelet[2058]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:12:01.364048 kubelet[2058]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:12:01.364484 kubelet[2058]: I1002 19:12:01.364136 2058 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:12:01.365603 kubelet[2058]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:12:01.365603 kubelet[2058]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:12:01.368347 kubelet[2058]: I1002 19:12:01.368328 2058 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:12:01.368347 kubelet[2058]: I1002 19:12:01.368343 2058 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:12:01.368496 kubelet[2058]: I1002 19:12:01.368486 2058 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:12:01.369527 kubelet[2058]: I1002 19:12:01.369505 2058 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:12:01.370116 kubelet[2058]: I1002 19:12:01.370091 2058 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:12:01.373250 kubelet[2058]: I1002 19:12:01.373218 2058 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:12:01.373439 kubelet[2058]: I1002 19:12:01.373420 2058 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:12:01.373526 kubelet[2058]: I1002 19:12:01.373502 2058 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:12:01.373639 kubelet[2058]: I1002 19:12:01.373532 2058 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:12:01.373639 kubelet[2058]: I1002 19:12:01.373545 2058 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:12:01.373639 kubelet[2058]: I1002 19:12:01.373584 2058 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:12:01.378748 kubelet[2058]: I1002 19:12:01.378725 2058 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:12:01.378748 kubelet[2058]: I1002 19:12:01.378748 2058 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:12:01.378912 kubelet[2058]: I1002 19:12:01.378779 2058 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:12:01.378912 kubelet[2058]: I1002 19:12:01.378819 2058 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:12:01.390000 audit[2058]: AVC avc: denied { mac_admin } for pid=2058 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.390000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:12:01.390000 audit[2058]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009b2de0 a1=c00005ded8 a2=c0009b2db0 a3=25 items=0 ppid=1 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:01.390000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:12:01.390000 audit[2058]: AVC avc: denied { mac_admin } for pid=2058 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.390000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:12:01.390000 audit[2058]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000846620 a1=c00005def0 a2=c0009b2e70 a3=25 items=0 ppid=1 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:01.390000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:12:01.401461 kubelet[2058]: I1002 19:12:01.389970 2058 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:12:01.401461 kubelet[2058]: I1002 19:12:01.390538 2058 server.go:1186] "Started kubelet" Oct 2 19:12:01.401461 kubelet[2058]: I1002 19:12:01.392553 2058 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:12:01.401461 kubelet[2058]: I1002 19:12:01.392621 2058 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:12:01.401461 kubelet[2058]: I1002 19:12:01.392642 2058 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:12:01.401461 kubelet[2058]: I1002 19:12:01.394850 2058 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:12:01.401461 kubelet[2058]: I1002 19:12:01.395388 2058 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:12:01.401461 kubelet[2058]: I1002 19:12:01.398748 2058 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:12:01.401461 kubelet[2058]: I1002 19:12:01.398813 2058 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:12:01.401461 kubelet[2058]: E1002 19:12:01.399697 2058 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:12:01.401461 kubelet[2058]: E1002 19:12:01.399712 2058 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:12:01.437236 kubelet[2058]: I1002 19:12:01.437210 2058 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:12:01.446838 kubelet[2058]: I1002 19:12:01.446762 2058 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:12:01.446838 kubelet[2058]: I1002 19:12:01.446776 2058 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:12:01.446838 kubelet[2058]: I1002 19:12:01.446812 2058 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:12:01.446838 kubelet[2058]: I1002 19:12:01.446837 2058 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:12:01.447033 kubelet[2058]: I1002 19:12:01.446849 2058 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:12:01.447033 kubelet[2058]: I1002 19:12:01.446872 2058 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:12:01.447033 kubelet[2058]: E1002 19:12:01.446907 2058 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:12:01.447033 kubelet[2058]: I1002 19:12:01.446967 2058 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:12:01.447033 kubelet[2058]: I1002 19:12:01.446982 2058 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:12:01.447033 kubelet[2058]: I1002 19:12:01.446988 2058 policy_none.go:49] "None policy: Start" Oct 2 19:12:01.448015 kubelet[2058]: I1002 19:12:01.447957 2058 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:12:01.448015 kubelet[2058]: I1002 19:12:01.447979 2058 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:12:01.448151 kubelet[2058]: I1002 19:12:01.448134 2058 state_mem.go:75] "Updated machine memory state" Oct 2 19:12:01.453066 kubelet[2058]: I1002 19:12:01.453031 2058 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:12:01.451000 audit[2058]: AVC avc: denied { mac_admin } for pid=2058 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:01.451000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:12:01.451000 audit[2058]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000da3a70 a1=c001402420 a2=c000da3a40 a3=25 items=0 ppid=1 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:01.451000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:12:01.453380 kubelet[2058]: I1002 19:12:01.453112 2058 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:12:01.454883 kubelet[2058]: I1002 19:12:01.454868 2058 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:12:01.547539 kubelet[2058]: I1002 19:12:01.547494 2058 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:12:01.547697 kubelet[2058]: I1002 19:12:01.547613 2058 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:12:01.547697 kubelet[2058]: I1002 19:12:01.547650 2058 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:12:01.563103 kubelet[2058]: I1002 19:12:01.556584 2058 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Oct 2 19:12:01.700568 kubelet[2058]: I1002 19:12:01.700527 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:01.700568 kubelet[2058]: I1002 19:12:01.700569 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/388d2d7243727dbf1c36de258c7ae8d5-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"388d2d7243727dbf1c36de258c7ae8d5\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:12:01.700753 kubelet[2058]: I1002 19:12:01.700608 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/388d2d7243727dbf1c36de258c7ae8d5-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"388d2d7243727dbf1c36de258c7ae8d5\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:12:01.700753 kubelet[2058]: I1002 19:12:01.700643 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:01.700753 kubelet[2058]: I1002 19:12:01.700720 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:01.700848 kubelet[2058]: I1002 19:12:01.700764 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:01.700848 kubelet[2058]: I1002 19:12:01.700799 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/fbbee22b6941d370b4e7de3cf42df07f-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"fbbee22b6941d370b4e7de3cf42df07f\") " pod="kube-system/kube-scheduler-localhost" Oct 2 19:12:01.700848 kubelet[2058]: I1002 19:12:01.700834 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/388d2d7243727dbf1c36de258c7ae8d5-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"388d2d7243727dbf1c36de258c7ae8d5\") " pod="kube-system/kube-apiserver-localhost" Oct 2 19:12:01.700913 kubelet[2058]: I1002 19:12:01.700860 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b3fbb6a05b0456c4809ee638aa5cfabe-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"b3fbb6a05b0456c4809ee638aa5cfabe\") " pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:01.743829 kubelet[2058]: E1002 19:12:01.743801 2058 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 19:12:01.858478 kubelet[2058]: E1002 19:12:01.858377 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:01.858745 kubelet[2058]: E1002 19:12:01.858709 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:02.004343 kubelet[2058]: I1002 19:12:02.004264 2058 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Oct 2 19:12:02.004491 kubelet[2058]: I1002 19:12:02.004359 2058 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Oct 2 19:12:02.045097 kubelet[2058]: E1002 19:12:02.045066 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:02.198000 audit[2113]: USER_ACCT pid=2113 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:12:02.198000 audit[2113]: CRED_REFR pid=2113 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:12:02.200022 sudo[2113]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:12:02.200226 sudo[2113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:12:02.200000 audit[2113]: USER_START pid=2113 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:12:02.379742 kubelet[2058]: I1002 19:12:02.379697 2058 apiserver.go:52] "Watching apiserver" Oct 2 19:12:02.399289 kubelet[2058]: I1002 19:12:02.399254 2058 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:12:02.405429 kubelet[2058]: I1002 19:12:02.405400 2058 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:12:02.651000 audit[2113]: USER_END pid=2113 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:12:02.651000 audit[2113]: CRED_DISP pid=2113 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:12:02.653550 sudo[2113]: pam_unix(sudo:session): session closed for user root Oct 2 19:12:02.697947 kubelet[2058]: E1002 19:12:02.697903 2058 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Oct 2 19:12:02.699008 kubelet[2058]: E1002 19:12:02.698513 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:03.002204 kubelet[2058]: E1002 19:12:03.002141 2058 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Oct 2 19:12:03.002504 kubelet[2058]: E1002 19:12:03.002473 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:03.183594 kubelet[2058]: E1002 19:12:03.183560 2058 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:03.184079 kubelet[2058]: E1002 19:12:03.184058 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:03.456247 kubelet[2058]: E1002 19:12:03.456208 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:03.456881 kubelet[2058]: E1002 19:12:03.456864 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:03.457147 kubelet[2058]: E1002 19:12:03.457118 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:03.595904 sudo[1252]: pam_unix(sudo:session): session closed for user root Oct 2 19:12:03.594000 audit[1252]: USER_END pid=1252 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:12:03.594000 audit[1252]: CRED_DISP pid=1252 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:12:03.597659 sshd[1249]: pam_unix(sshd:session): session closed for user core Oct 2 19:12:03.596000 audit[1249]: USER_END pid=1249 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:03.596000 audit[1249]: CRED_DISP pid=1249 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:03.600324 systemd[1]: sshd@6-10.0.0.65:22-10.0.0.1:44976.service: Deactivated successfully. Oct 2 19:12:03.598000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.65:22-10.0.0.1:44976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:03.600984 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:12:03.601135 systemd[1]: session-7.scope: Consumed 3.452s CPU time. Oct 2 19:12:03.601697 systemd-logind[1117]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:12:03.602315 systemd-logind[1117]: Removed session 7. Oct 2 19:12:03.783349 kubelet[2058]: I1002 19:12:03.783233 2058 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.783180723 pod.CreationTimestamp="2023-10-02 19:12:01 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:12:03.783059764 +0000 UTC m=+2.456444056" watchObservedRunningTime="2023-10-02 19:12:03.783180723 +0000 UTC m=+2.456565005" Oct 2 19:12:03.783349 kubelet[2058]: I1002 19:12:03.783345 2058 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=4.783317953 pod.CreationTimestamp="2023-10-02 19:11:59 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:12:03.391753902 +0000 UTC m=+2.065138194" watchObservedRunningTime="2023-10-02 19:12:03.783317953 +0000 UTC m=+2.456702235" Oct 2 19:12:03.873000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=32591 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:12:03.873000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0012f0340 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:12:03.873000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:04.459060 kubelet[2058]: E1002 19:12:04.459031 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:05.229083 kubelet[2058]: E1002 19:12:05.229054 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:05.460058 kubelet[2058]: E1002 19:12:05.460032 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:05.634912 kubelet[2058]: E1002 19:12:05.634809 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:14.262359 kubelet[2058]: E1002 19:12:14.261657 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:14.327562 kubelet[2058]: I1002 19:12:14.327523 2058 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=13.327488823 pod.CreationTimestamp="2023-10-02 19:12:01 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:12:04.260200016 +0000 UTC m=+2.933584298" watchObservedRunningTime="2023-10-02 19:12:14.327488823 +0000 UTC m=+13.000873105" Oct 2 19:12:14.472152 kubelet[2058]: E1002 19:12:14.472104 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:15.056175 kubelet[2058]: I1002 19:12:15.056124 2058 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:12:15.057522 kubelet[2058]: I1002 19:12:15.057495 2058 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:12:15.064303 systemd[1]: Created slice kubepods-burstable-podc8aa2c19_3f4f_4c8a_9d81_e59135bc56e7.slice. Oct 2 19:12:15.070172 systemd[1]: Created slice kubepods-besteffort-pod1f31e163_9243_4df8_8189_2207d56031b8.slice. Oct 2 19:12:15.093637 kubelet[2058]: I1002 19:12:15.093586 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-h5vg5\" (UniqueName: \"kubernetes.io/projected/1f31e163-9243-4df8-8189-2207d56031b8-kube-api-access-h5vg5\") pod \"kube-proxy-nt745\" (UID: \"1f31e163-9243-4df8-8189-2207d56031b8\") " pod="kube-system/kube-proxy-nt745" Oct 2 19:12:15.093637 kubelet[2058]: I1002 19:12:15.093648 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-etc-cni-netd\") pod \"cilium-hcdth\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " pod="kube-system/cilium-hcdth" Oct 2 19:12:15.093877 kubelet[2058]: I1002 19:12:15.093686 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-host-proc-sys-net\") pod \"cilium-hcdth\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " pod="kube-system/cilium-hcdth" Oct 2 19:12:15.093877 kubelet[2058]: I1002 19:12:15.093714 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1f31e163-9243-4df8-8189-2207d56031b8-xtables-lock\") pod \"kube-proxy-nt745\" (UID: \"1f31e163-9243-4df8-8189-2207d56031b8\") " pod="kube-system/kube-proxy-nt745" Oct 2 19:12:15.093877 kubelet[2058]: I1002 19:12:15.093742 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-xtables-lock\") pod \"cilium-hcdth\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " pod="kube-system/cilium-hcdth" Oct 2 19:12:15.093877 kubelet[2058]: I1002 19:12:15.093768 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1f31e163-9243-4df8-8189-2207d56031b8-lib-modules\") pod \"kube-proxy-nt745\" (UID: \"1f31e163-9243-4df8-8189-2207d56031b8\") " pod="kube-system/kube-proxy-nt745" Oct 2 19:12:15.093877 kubelet[2058]: I1002 19:12:15.093828 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-hubble-tls\") pod \"cilium-hcdth\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " pod="kube-system/cilium-hcdth" Oct 2 19:12:15.093877 kubelet[2058]: I1002 19:12:15.093858 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-cilium-cgroup\") pod \"cilium-hcdth\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " pod="kube-system/cilium-hcdth" Oct 2 19:12:15.094075 kubelet[2058]: I1002 19:12:15.093887 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/1f31e163-9243-4df8-8189-2207d56031b8-kube-proxy\") pod \"kube-proxy-nt745\" (UID: \"1f31e163-9243-4df8-8189-2207d56031b8\") " pod="kube-system/kube-proxy-nt745" Oct 2 19:12:15.094075 kubelet[2058]: I1002 19:12:15.093920 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-hostproc\") pod \"cilium-hcdth\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " pod="kube-system/cilium-hcdth" Oct 2 19:12:15.094075 kubelet[2058]: I1002 19:12:15.093946 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-lib-modules\") pod \"cilium-hcdth\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " pod="kube-system/cilium-hcdth" Oct 2 19:12:15.094075 kubelet[2058]: I1002 19:12:15.093973 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-cilium-config-path\") pod \"cilium-hcdth\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " pod="kube-system/cilium-hcdth" Oct 2 19:12:15.094075 kubelet[2058]: I1002 19:12:15.094003 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-host-proc-sys-kernel\") pod \"cilium-hcdth\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " pod="kube-system/cilium-hcdth" Oct 2 19:12:15.094075 kubelet[2058]: I1002 19:12:15.094041 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-bpf-maps\") pod \"cilium-hcdth\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " pod="kube-system/cilium-hcdth" Oct 2 19:12:15.094204 kubelet[2058]: I1002 19:12:15.094087 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ncxcb\" (UniqueName: \"kubernetes.io/projected/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-kube-api-access-ncxcb\") pod \"cilium-hcdth\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " pod="kube-system/cilium-hcdth" Oct 2 19:12:15.094204 kubelet[2058]: I1002 19:12:15.094130 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-cni-path\") pod \"cilium-hcdth\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " pod="kube-system/cilium-hcdth" Oct 2 19:12:15.094204 kubelet[2058]: I1002 19:12:15.094170 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-clustermesh-secrets\") pod \"cilium-hcdth\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " pod="kube-system/cilium-hcdth" Oct 2 19:12:15.094204 kubelet[2058]: I1002 19:12:15.094195 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-cilium-run\") pod \"cilium-hcdth\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " pod="kube-system/cilium-hcdth" Oct 2 19:12:15.146891 kubelet[2058]: I1002 19:12:15.146855 2058 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:12:15.151560 systemd[1]: Created slice kubepods-besteffort-pod13645d17_ddbe_4bc8_a605_0eb5d6812cc8.slice. Oct 2 19:12:15.179887 kubelet[2058]: I1002 19:12:15.179858 2058 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:12:15.180291 env[1130]: time="2023-10-02T19:12:15.180246842Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:12:15.180557 kubelet[2058]: I1002 19:12:15.180498 2058 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:12:15.194988 kubelet[2058]: I1002 19:12:15.194942 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/13645d17-ddbe-4bc8-a605-0eb5d6812cc8-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-jtccm\" (UID: \"13645d17-ddbe-4bc8-a605-0eb5d6812cc8\") " pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:12:15.195175 kubelet[2058]: I1002 19:12:15.195154 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5b82l\" (UniqueName: \"kubernetes.io/projected/13645d17-ddbe-4bc8-a605-0eb5d6812cc8-kube-api-access-5b82l\") pod \"cilium-operator-f59cbd8c6-jtccm\" (UID: \"13645d17-ddbe-4bc8-a605-0eb5d6812cc8\") " pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:12:15.233722 kubelet[2058]: E1002 19:12:15.233693 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:15.639978 kubelet[2058]: E1002 19:12:15.639952 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:15.667538 kubelet[2058]: E1002 19:12:15.667501 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:15.668334 env[1130]: time="2023-10-02T19:12:15.668283431Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-hcdth,Uid:c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7,Namespace:kube-system,Attempt:0,}" Oct 2 19:12:15.683658 kubelet[2058]: E1002 19:12:15.681617 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:15.683826 env[1130]: time="2023-10-02T19:12:15.682294185Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-nt745,Uid:1f31e163-9243-4df8-8189-2207d56031b8,Namespace:kube-system,Attempt:0,}" Oct 2 19:12:15.687439 env[1130]: time="2023-10-02T19:12:15.686886557Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:12:15.687439 env[1130]: time="2023-10-02T19:12:15.686952340Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:12:15.687439 env[1130]: time="2023-10-02T19:12:15.686984180Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:12:15.687439 env[1130]: time="2023-10-02T19:12:15.687134533Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d pid=2163 runtime=io.containerd.runc.v2 Oct 2 19:12:15.700074 env[1130]: time="2023-10-02T19:12:15.700002286Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:12:15.700432 env[1130]: time="2023-10-02T19:12:15.700371841Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:12:15.700432 env[1130]: time="2023-10-02T19:12:15.700394625Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:12:15.700720 env[1130]: time="2023-10-02T19:12:15.700681033Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/60b1aaa41f156582d4d8301bea55d523824020f6feb65a3f0a3832e841e0ed1a pid=2192 runtime=io.containerd.runc.v2 Oct 2 19:12:15.701667 systemd[1]: Started cri-containerd-4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d.scope. Oct 2 19:12:15.717904 systemd[1]: Started cri-containerd-60b1aaa41f156582d4d8301bea55d523824020f6feb65a3f0a3832e841e0ed1a.scope. Oct 2 19:12:15.723951 kernel: kauditd_printk_skb: 273 callbacks suppressed Oct 2 19:12:15.724066 kernel: audit: type=1400 audit(1696273935.717:988): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.724089 kernel: audit: type=1400 audit(1696273935.717:989): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.727081 kernel: audit: type=1400 audit(1696273935.717:990): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.727124 kernel: audit: type=1400 audit(1696273935.717:991): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.729747 kernel: audit: type=1400 audit(1696273935.717:992): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.734833 kernel: audit: type=1400 audit(1696273935.717:993): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.734964 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:12:15.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.737889 kernel: audit: type=1400 audit(1696273935.717:994): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.737958 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:12:15.737979 kernel: audit: type=1400 audit(1696273935.717:995): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.721000 audit: BPF prog-id=112 op=LOAD Oct 2 19:12:15.721000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.721000 audit[2174]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2163 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465616164633630656533636363366134333163663265626132353463 Oct 2 19:12:15.721000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.721000 audit[2174]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2163 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465616164633630656533636363366134333163663265626132353463 Oct 2 19:12:15.721000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.721000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.721000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.721000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.721000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.721000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.721000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.721000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.721000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.721000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.721000 audit: BPF prog-id=113 op=LOAD Oct 2 19:12:15.721000 audit[2174]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0002ff3b0 items=0 ppid=2163 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465616164633630656533636363366134333163663265626132353463 Oct 2 19:12:15.726000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.726000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.726000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.726000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.726000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.726000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.726000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.726000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.726000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.726000 audit: BPF prog-id=114 op=LOAD Oct 2 19:12:15.726000 audit[2174]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0002ff3f8 items=0 ppid=2163 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465616164633630656533636363366134333163663265626132353463 Oct 2 19:12:15.728000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:12:15.728000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:12:15.728000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.728000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.728000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.728000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.728000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.728000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.728000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.728000 audit[2174]: AVC avc: denied { perfmon } for pid=2174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.728000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.728000 audit[2174]: AVC avc: denied { bpf } for pid=2174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.728000 audit: BPF prog-id=115 op=LOAD Oct 2 19:12:15.728000 audit[2174]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0002ff808 items=0 ppid=2163 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.728000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465616164633630656533636363366134333163663265626132353463 Oct 2 19:12:15.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.736000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.736000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2192 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630623161616134316631353635383264346438333031626561353564 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2192 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630623161616134316631353635383264346438333031626561353564 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit: BPF prog-id=117 op=LOAD Oct 2 19:12:15.739000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000024370 items=0 ppid=2192 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630623161616134316631353635383264346438333031626561353564 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit: BPF prog-id=118 op=LOAD Oct 2 19:12:15.739000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000243b8 items=0 ppid=2192 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630623161616134316631353635383264346438333031626561353564 Oct 2 19:12:15.739000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:12:15.739000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.739000 audit: BPF prog-id=119 op=LOAD Oct 2 19:12:15.739000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000247c8 items=0 ppid=2192 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630623161616134316631353635383264346438333031626561353564 Oct 2 19:12:15.753733 env[1130]: time="2023-10-02T19:12:15.753667568Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-hcdth,Uid:c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7,Namespace:kube-system,Attempt:0,} returns sandbox id \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\"" Oct 2 19:12:15.754463 kubelet[2058]: E1002 19:12:15.754441 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:15.756217 env[1130]: time="2023-10-02T19:12:15.755621626Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-nt745,Uid:1f31e163-9243-4df8-8189-2207d56031b8,Namespace:kube-system,Attempt:0,} returns sandbox id \"60b1aaa41f156582d4d8301bea55d523824020f6feb65a3f0a3832e841e0ed1a\"" Oct 2 19:12:15.756217 env[1130]: time="2023-10-02T19:12:15.755915639Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:12:15.756333 kubelet[2058]: E1002 19:12:15.756174 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:15.757855 env[1130]: time="2023-10-02T19:12:15.757824912Z" level=info msg="CreateContainer within sandbox \"60b1aaa41f156582d4d8301bea55d523824020f6feb65a3f0a3832e841e0ed1a\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:12:15.785313 env[1130]: time="2023-10-02T19:12:15.785250989Z" level=info msg="CreateContainer within sandbox \"60b1aaa41f156582d4d8301bea55d523824020f6feb65a3f0a3832e841e0ed1a\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"3eec42dcd83002012a818f3c221b4fe0cb0bac9eddb34afc8d480e1eb3779f8e\"" Oct 2 19:12:15.786023 env[1130]: time="2023-10-02T19:12:15.785961435Z" level=info msg="StartContainer for \"3eec42dcd83002012a818f3c221b4fe0cb0bac9eddb34afc8d480e1eb3779f8e\"" Oct 2 19:12:15.800880 systemd[1]: Started cri-containerd-3eec42dcd83002012a818f3c221b4fe0cb0bac9eddb34afc8d480e1eb3779f8e.scope. Oct 2 19:12:15.813000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.813000 audit[2245]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2192 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365656334326463643833303032303132613831386633633232316234 Oct 2 19:12:15.813000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.813000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.813000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.813000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.813000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.813000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.813000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.813000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.813000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.813000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.813000 audit: BPF prog-id=120 op=LOAD Oct 2 19:12:15.813000 audit[2245]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000e1be0 items=0 ppid=2192 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365656334326463643833303032303132613831386633633232316234 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit: BPF prog-id=121 op=LOAD Oct 2 19:12:15.814000 audit[2245]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000e1c28 items=0 ppid=2192 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365656334326463643833303032303132613831386633633232316234 Oct 2 19:12:15.814000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:12:15.814000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { perfmon } for pid=2245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit[2245]: AVC avc: denied { bpf } for pid=2245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:15.814000 audit: BPF prog-id=122 op=LOAD Oct 2 19:12:15.814000 audit[2245]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000e1cb8 items=0 ppid=2192 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365656334326463643833303032303132613831386633633232316234 Oct 2 19:12:15.831921 env[1130]: time="2023-10-02T19:12:15.831851046Z" level=info msg="StartContainer for \"3eec42dcd83002012a818f3c221b4fe0cb0bac9eddb34afc8d480e1eb3779f8e\" returns successfully" Oct 2 19:12:15.874000 audit[2297]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=2297 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:15.874000 audit[2297]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd41929780 a2=0 a3=7ffd4192976c items=0 ppid=2256 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.874000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:12:15.875000 audit[2296]: NETFILTER_CFG table=mangle:60 family=10 entries=1 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:15.875000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdd6100250 a2=0 a3=31030 items=0 ppid=2256 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.875000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:12:15.876000 audit[2299]: NETFILTER_CFG table=nat:61 family=10 entries=1 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:15.876000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff5d1fa690 a2=0 a3=7fff5d1fa67c items=0 ppid=2256 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.876000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:12:15.877000 audit[2298]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:15.877000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd3b6a80c0 a2=0 a3=7ffd3b6a80ac items=0 ppid=2256 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.877000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:12:15.877000 audit[2300]: NETFILTER_CFG table=filter:63 family=10 entries=1 op=nft_register_chain pid=2300 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:15.877000 audit[2300]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc48791d50 a2=0 a3=7ffc48791d3c items=0 ppid=2256 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.877000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:12:15.879000 audit[2301]: NETFILTER_CFG table=filter:64 family=2 entries=1 op=nft_register_chain pid=2301 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:15.879000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd81b216e0 a2=0 a3=7ffd81b216cc items=0 ppid=2256 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.879000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:12:15.978000 audit[2302]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:15.978000 audit[2302]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd0eb14890 a2=0 a3=7ffd0eb1487c items=0 ppid=2256 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.978000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:12:15.981000 audit[2304]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:15.981000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc7fc4d280 a2=0 a3=7ffc7fc4d26c items=0 ppid=2256 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.981000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:12:15.984000 audit[2307]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=2307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:15.984000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffeb91e4610 a2=0 a3=7ffeb91e45fc items=0 ppid=2256 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.984000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:12:15.985000 audit[2308]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:15.985000 audit[2308]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffee2305690 a2=0 a3=7ffee230567c items=0 ppid=2256 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.985000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:12:15.987000 audit[2310]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2310 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:15.987000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe7ba02760 a2=0 a3=7ffe7ba0274c items=0 ppid=2256 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.987000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:12:15.989000 audit[2311]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:15.989000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdbc311bf0 a2=0 a3=7ffdbc311bdc items=0 ppid=2256 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.989000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:12:15.991000 audit[2313]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:15.991000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdbacaf040 a2=0 a3=7ffdbacaf02c items=0 ppid=2256 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.991000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:12:15.995000 audit[2316]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2316 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:15.995000 audit[2316]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd26894ae0 a2=0 a3=7ffd26894acc items=0 ppid=2256 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.995000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:12:15.997000 audit[2317]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2317 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:15.997000 audit[2317]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffed19bc0a0 a2=0 a3=7ffed19bc08c items=0 ppid=2256 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.997000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:12:15.999000 audit[2319]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:15.999000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff22006170 a2=0 a3=7fff2200615c items=0 ppid=2256 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:15.999000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:12:16.000000 audit[2320]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=2320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:16.000000 audit[2320]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcfa419b50 a2=0 a3=7ffcfa419b3c items=0 ppid=2256 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.000000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:12:16.003000 audit[2322]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2322 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:16.003000 audit[2322]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd9c585490 a2=0 a3=7ffd9c58547c items=0 ppid=2256 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.003000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:12:16.006000 audit[2325]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:16.006000 audit[2325]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe447f44a0 a2=0 a3=7ffe447f448c items=0 ppid=2256 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.006000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:12:16.009000 audit[2328]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:16.009000 audit[2328]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffceb07a60 a2=0 a3=7fffceb07a4c items=0 ppid=2256 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.009000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:12:16.010000 audit[2329]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=2329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:16.010000 audit[2329]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffde5316440 a2=0 a3=7ffde531642c items=0 ppid=2256 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.010000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:12:16.012000 audit[2331]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=2331 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:16.012000 audit[2331]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fffeee90f70 a2=0 a3=7fffeee90f5c items=0 ppid=2256 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.012000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:12:16.015000 audit[2334]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=2334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:12:16.015000 audit[2334]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcb673e390 a2=0 a3=7ffcb673e37c items=0 ppid=2256 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.015000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:12:16.026000 audit[2338]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=2338 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:12:16.026000 audit[2338]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffd6c0fd140 a2=0 a3=7ffd6c0fd12c items=0 ppid=2256 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.026000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:12:16.032000 audit[2338]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=2338 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:12:16.032000 audit[2338]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffd6c0fd140 a2=0 a3=7ffd6c0fd12c items=0 ppid=2256 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.032000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:12:16.033000 audit[2343]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2343 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.033000 audit[2343]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd2feaf950 a2=0 a3=7ffd2feaf93c items=0 ppid=2256 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.033000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:12:16.036000 audit[2345]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=2345 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.036000 audit[2345]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffde33e0260 a2=0 a3=7ffde33e024c items=0 ppid=2256 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.036000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:12:16.040000 audit[2348]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=2348 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.040000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff0fc02180 a2=0 a3=7fff0fc0216c items=0 ppid=2256 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.040000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:12:16.041000 audit[2349]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2349 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.041000 audit[2349]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd77bf9e90 a2=0 a3=7ffd77bf9e7c items=0 ppid=2256 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.041000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:12:16.043000 audit[2351]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2351 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.043000 audit[2351]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff9c560760 a2=0 a3=7fff9c56074c items=0 ppid=2256 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.043000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:12:16.044000 audit[2352]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=2352 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.044000 audit[2352]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff901149e0 a2=0 a3=7fff901149cc items=0 ppid=2256 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.044000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:12:16.046000 audit[2354]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.046000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe537b1270 a2=0 a3=7ffe537b125c items=0 ppid=2256 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.046000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:12:16.050000 audit[2357]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=2357 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.050000 audit[2357]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd4205f8b0 a2=0 a3=7ffd4205f89c items=0 ppid=2256 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.050000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:12:16.051000 audit[2358]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=2358 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.051000 audit[2358]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd73ef7540 a2=0 a3=7ffd73ef752c items=0 ppid=2256 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.051000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:12:16.052000 audit[2360]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.052000 audit[2360]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcdd0eb790 a2=0 a3=7ffcdd0eb77c items=0 ppid=2256 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.052000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:12:16.053000 audit[2361]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=2361 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.053000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd9f109fb0 a2=0 a3=7ffd9f109f9c items=0 ppid=2256 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.053000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:12:16.058000 audit[2363]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=2363 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.058000 audit[2363]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff7180abd0 a2=0 a3=7fff7180abbc items=0 ppid=2256 pid=2363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.058000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:12:16.062000 audit[2366]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.062000 audit[2366]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcdde396d0 a2=0 a3=7ffcdde396bc items=0 ppid=2256 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.062000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:12:16.065000 audit[2369]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2369 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.065000 audit[2369]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd9f9b7cb0 a2=0 a3=7ffd9f9b7c9c items=0 ppid=2256 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.065000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:12:16.066000 audit[2370]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=2370 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.066000 audit[2370]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd07f810c0 a2=0 a3=7ffd07f810ac items=0 ppid=2256 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.066000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:12:16.068000 audit[2372]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=2372 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.068000 audit[2372]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fffa0ed9770 a2=0 a3=7fffa0ed975c items=0 ppid=2256 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.068000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:12:16.071000 audit[2376]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=2376 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:12:16.071000 audit[2376]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffc90405940 a2=0 a3=7ffc9040592c items=0 ppid=2256 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.071000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:12:16.076000 audit[2380]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=2380 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:12:16.076000 audit[2380]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffcd8eb1710 a2=0 a3=7ffcd8eb16fc items=0 ppid=2256 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.076000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:12:16.076000 audit[2380]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=2380 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:12:16.076000 audit[2380]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffcd8eb1710 a2=0 a3=7ffcd8eb16fc items=0 ppid=2256 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.076000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:12:16.353886 kubelet[2058]: E1002 19:12:16.353768 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:16.354287 env[1130]: time="2023-10-02T19:12:16.354248010Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-jtccm,Uid:13645d17-ddbe-4bc8-a605-0eb5d6812cc8,Namespace:kube-system,Attempt:0,}" Oct 2 19:12:16.380613 env[1130]: time="2023-10-02T19:12:16.380521048Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:12:16.380613 env[1130]: time="2023-10-02T19:12:16.380573857Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:12:16.380613 env[1130]: time="2023-10-02T19:12:16.380594105Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:12:16.381039 env[1130]: time="2023-10-02T19:12:16.380967067Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8 pid=2388 runtime=io.containerd.runc.v2 Oct 2 19:12:16.392404 systemd[1]: Started cri-containerd-0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8.scope. Oct 2 19:12:16.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit: BPF prog-id=123 op=LOAD Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2388 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037383665656363633965303965333337626563623138633737623065 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2388 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037383665656363633965303965333337626563623138633737623065 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit: BPF prog-id=124 op=LOAD Oct 2 19:12:16.400000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003ac7b0 items=0 ppid=2388 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037383665656363633965303965333337626563623138633737623065 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit: BPF prog-id=125 op=LOAD Oct 2 19:12:16.400000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003ac7f8 items=0 ppid=2388 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037383665656363633965303965333337626563623138633737623065 Oct 2 19:12:16.400000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:12:16.400000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:16.400000 audit: BPF prog-id=126 op=LOAD Oct 2 19:12:16.400000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003acc08 items=0 ppid=2388 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:16.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037383665656363633965303965333337626563623138633737623065 Oct 2 19:12:16.432645 env[1130]: time="2023-10-02T19:12:16.432587280Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-jtccm,Uid:13645d17-ddbe-4bc8-a605-0eb5d6812cc8,Namespace:kube-system,Attempt:0,} returns sandbox id \"0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8\"" Oct 2 19:12:16.433429 kubelet[2058]: E1002 19:12:16.433404 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:16.476763 kubelet[2058]: E1002 19:12:16.476719 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:17.481008 kubelet[2058]: E1002 19:12:17.480959 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:17.868017 kubelet[2058]: I1002 19:12:17.867675 2058 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-nt745" podStartSLOduration=2.867627546 pod.CreationTimestamp="2023-10-02 19:12:15 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:12:17.867073083 +0000 UTC m=+16.540457375" watchObservedRunningTime="2023-10-02 19:12:17.867627546 +0000 UTC m=+16.541011828" Oct 2 19:12:21.481816 kubelet[2058]: I1002 19:12:21.481771 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:12:21.481816 kubelet[2058]: I1002 19:12:21.481824 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:12:21.483522 kubelet[2058]: I1002 19:12:21.483501 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:12:21.485412 kubelet[2058]: I1002 19:12:21.485399 2058 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee" size=301773 Oct 2 19:12:21.485661 env[1130]: time="2023-10-02T19:12:21.485624802Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\"" Oct 2 19:12:21.500334 env[1130]: time="2023-10-02T19:12:21.500289146Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause:3.6,XXX_unrecognized:[],}" Oct 2 19:12:21.501891 env[1130]: time="2023-10-02T19:12:21.501832006Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,XXX_unrecognized:[],}" Oct 2 19:12:21.502909 env[1130]: time="2023-10-02T19:12:21.502888142Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,XXX_unrecognized:[],}" Oct 2 19:12:21.505455 env[1130]: time="2023-10-02T19:12:21.505426643Z" level=info msg="RemoveImage \"sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\" returns successfully" Oct 2 19:12:21.505730 kubelet[2058]: I1002 19:12:21.505703 2058 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7" size=102542580 Oct 2 19:12:21.505939 env[1130]: time="2023-10-02T19:12:21.505902528Z" level=info msg="RemoveImage \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 19:12:21.510134 env[1130]: time="2023-10-02T19:12:21.510111399Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd:3.5.6-0,XXX_unrecognized:[],}" Oct 2 19:12:21.512012 env[1130]: time="2023-10-02T19:12:21.511994418Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,XXX_unrecognized:[],}" Oct 2 19:12:21.513085 env[1130]: time="2023-10-02T19:12:21.512968479Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,XXX_unrecognized:[],}" Oct 2 19:12:21.589374 env[1130]: time="2023-10-02T19:12:21.589321516Z" level=info msg="RemoveImage \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\" returns successfully" Oct 2 19:12:21.589607 kubelet[2058]: I1002 19:12:21.589579 2058 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a" size=14837849 Oct 2 19:12:21.589988 env[1130]: time="2023-10-02T19:12:21.589953475Z" level=info msg="RemoveImage \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:12:21.591126 env[1130]: time="2023-10-02T19:12:21.591086725Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns:v1.9.3,XXX_unrecognized:[],}" Oct 2 19:12:21.592160 env[1130]: time="2023-10-02T19:12:21.592130377Z" level=info msg="ImageDelete event &ImageDelete{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,XXX_unrecognized:[],}" Oct 2 19:12:21.593054 env[1130]: time="2023-10-02T19:12:21.593015099Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,XXX_unrecognized:[],}" Oct 2 19:12:21.604519 env[1130]: time="2023-10-02T19:12:21.604469290Z" level=info msg="RemoveImage \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\" returns successfully" Oct 2 19:12:21.612400 kubelet[2058]: I1002 19:12:21.612365 2058 eviction_manager.go:352] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:12:23.302641 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3990651258.mount: Deactivated successfully. Oct 2 19:12:27.859419 env[1130]: time="2023-10-02T19:12:27.859350558Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:27.864271 env[1130]: time="2023-10-02T19:12:27.864219044Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:27.866514 env[1130]: time="2023-10-02T19:12:27.866424496Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:27.867137 env[1130]: time="2023-10-02T19:12:27.867098862Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:12:27.868578 env[1130]: time="2023-10-02T19:12:27.867672320Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:12:27.868678 env[1130]: time="2023-10-02T19:12:27.868653483Z" level=info msg="CreateContainer within sandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:12:27.894636 env[1130]: time="2023-10-02T19:12:27.894564901Z" level=info msg="CreateContainer within sandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef\"" Oct 2 19:12:27.895184 env[1130]: time="2023-10-02T19:12:27.895158636Z" level=info msg="StartContainer for \"61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef\"" Oct 2 19:12:27.910676 systemd[1]: Started cri-containerd-61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef.scope. Oct 2 19:12:27.918808 systemd[1]: cri-containerd-61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef.scope: Deactivated successfully. Oct 2 19:12:27.919152 systemd[1]: Stopped cri-containerd-61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef.scope. Oct 2 19:12:27.923095 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef-rootfs.mount: Deactivated successfully. Oct 2 19:12:28.191377 env[1130]: time="2023-10-02T19:12:28.191312753Z" level=info msg="shim disconnected" id=61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef Oct 2 19:12:28.191377 env[1130]: time="2023-10-02T19:12:28.191357547Z" level=warning msg="cleaning up after shim disconnected" id=61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef namespace=k8s.io Oct 2 19:12:28.191377 env[1130]: time="2023-10-02T19:12:28.191365933Z" level=info msg="cleaning up dead shim" Oct 2 19:12:28.199194 env[1130]: time="2023-10-02T19:12:28.199136266Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:12:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2448 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:12:28Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:12:28.199528 env[1130]: time="2023-10-02T19:12:28.199408969Z" level=error msg="copy shim log" error="read /proc/self/fd/38: file already closed" Oct 2 19:12:28.199713 env[1130]: time="2023-10-02T19:12:28.199664990Z" level=error msg="Failed to pipe stdout of container \"61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef\"" error="reading from a closed fifo" Oct 2 19:12:28.199812 env[1130]: time="2023-10-02T19:12:28.199758004Z" level=error msg="Failed to pipe stderr of container \"61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef\"" error="reading from a closed fifo" Oct 2 19:12:28.202628 env[1130]: time="2023-10-02T19:12:28.202523477Z" level=error msg="StartContainer for \"61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:12:28.202912 kubelet[2058]: E1002 19:12:28.202879 2058 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef" Oct 2 19:12:28.203205 kubelet[2058]: E1002 19:12:28.203029 2058 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:12:28.203205 kubelet[2058]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:12:28.203205 kubelet[2058]: rm /hostbin/cilium-mount Oct 2 19:12:28.203205 kubelet[2058]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ncxcb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:12:28.203392 kubelet[2058]: E1002 19:12:28.203085 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:12:28.501757 kubelet[2058]: E1002 19:12:28.501411 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:28.504465 env[1130]: time="2023-10-02T19:12:28.504411343Z" level=info msg="CreateContainer within sandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:12:29.052690 env[1130]: time="2023-10-02T19:12:29.052598403Z" level=info msg="CreateContainer within sandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8\"" Oct 2 19:12:29.053217 env[1130]: time="2023-10-02T19:12:29.053185005Z" level=info msg="StartContainer for \"5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8\"" Oct 2 19:12:29.069508 systemd[1]: Started cri-containerd-5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8.scope. Oct 2 19:12:29.076560 systemd[1]: cri-containerd-5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8.scope: Deactivated successfully. Oct 2 19:12:29.076914 systemd[1]: Stopped cri-containerd-5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8.scope. Oct 2 19:12:29.081381 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8-rootfs.mount: Deactivated successfully. Oct 2 19:12:29.105601 env[1130]: time="2023-10-02T19:12:29.105552987Z" level=info msg="shim disconnected" id=5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8 Oct 2 19:12:29.105717 env[1130]: time="2023-10-02T19:12:29.105609543Z" level=warning msg="cleaning up after shim disconnected" id=5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8 namespace=k8s.io Oct 2 19:12:29.105717 env[1130]: time="2023-10-02T19:12:29.105620504Z" level=info msg="cleaning up dead shim" Oct 2 19:12:29.111886 env[1130]: time="2023-10-02T19:12:29.111841698Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:12:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2484 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:12:29Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:12:29.112079 env[1130]: time="2023-10-02T19:12:29.112033488Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:12:29.112601 env[1130]: time="2023-10-02T19:12:29.112566769Z" level=error msg="Failed to pipe stdout of container \"5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8\"" error="reading from a closed fifo" Oct 2 19:12:29.112657 env[1130]: time="2023-10-02T19:12:29.112636260Z" level=error msg="Failed to pipe stderr of container \"5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8\"" error="reading from a closed fifo" Oct 2 19:12:29.116451 env[1130]: time="2023-10-02T19:12:29.116399005Z" level=error msg="StartContainer for \"5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:12:29.116659 kubelet[2058]: E1002 19:12:29.116624 2058 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8" Oct 2 19:12:29.116767 kubelet[2058]: E1002 19:12:29.116742 2058 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:12:29.116767 kubelet[2058]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:12:29.116767 kubelet[2058]: rm /hostbin/cilium-mount Oct 2 19:12:29.116767 kubelet[2058]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ncxcb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:12:29.117036 kubelet[2058]: E1002 19:12:29.116819 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:12:29.504370 kubelet[2058]: I1002 19:12:29.504333 2058 scope.go:115] "RemoveContainer" containerID="61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef" Oct 2 19:12:29.505077 kubelet[2058]: I1002 19:12:29.505058 2058 scope.go:115] "RemoveContainer" containerID="61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef" Oct 2 19:12:29.506780 env[1130]: time="2023-10-02T19:12:29.506731862Z" level=info msg="RemoveContainer for \"61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef\"" Oct 2 19:12:29.507027 env[1130]: time="2023-10-02T19:12:29.507000076Z" level=info msg="RemoveContainer for \"61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef\"" Oct 2 19:12:29.507107 env[1130]: time="2023-10-02T19:12:29.507073444Z" level=error msg="RemoveContainer for \"61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef\" failed" error="failed to set removing state for container \"61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef\": container is already in removing state" Oct 2 19:12:29.507834 kubelet[2058]: E1002 19:12:29.507331 2058 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef\": container is already in removing state" containerID="61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef" Oct 2 19:12:29.507834 kubelet[2058]: E1002 19:12:29.507370 2058 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef": container is already in removing state; Skipping pod "cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)" Oct 2 19:12:29.507834 kubelet[2058]: E1002 19:12:29.507422 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:29.507834 kubelet[2058]: E1002 19:12:29.507609 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:12:29.576698 env[1130]: time="2023-10-02T19:12:29.576645455Z" level=info msg="RemoveContainer for \"61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef\" returns successfully" Oct 2 19:12:30.507911 kubelet[2058]: E1002 19:12:30.507884 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:30.508465 kubelet[2058]: E1002 19:12:30.508443 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:12:31.296915 kubelet[2058]: W1002 19:12:31.296864 2058 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc8aa2c19_3f4f_4c8a_9d81_e59135bc56e7.slice/cri-containerd-61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef.scope WatchSource:0}: container "61d1b48ef2c5d01d3f422503e3fc3ff548e45de1901769d25c265fdb0af133ef" in namespace "k8s.io": not found Oct 2 19:12:31.447751 env[1130]: time="2023-10-02T19:12:31.447650234Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:31.451680 env[1130]: time="2023-10-02T19:12:31.451621500Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:31.456483 env[1130]: time="2023-10-02T19:12:31.456414720Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:12:31.457065 env[1130]: time="2023-10-02T19:12:31.457022892Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:12:31.458844 env[1130]: time="2023-10-02T19:12:31.458807493Z" level=info msg="CreateContainer within sandbox \"0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:12:31.476758 env[1130]: time="2023-10-02T19:12:31.476697564Z" level=info msg="CreateContainer within sandbox \"0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3\"" Oct 2 19:12:31.477324 env[1130]: time="2023-10-02T19:12:31.477292962Z" level=info msg="StartContainer for \"507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3\"" Oct 2 19:12:31.495258 systemd[1]: Started cri-containerd-507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3.scope. Oct 2 19:12:31.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.505267 kernel: kauditd_printk_skb: 338 callbacks suppressed Oct 2 19:12:31.505336 kernel: audit: type=1400 audit(1696273951.502:1091): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.509298 kernel: audit: type=1400 audit(1696273951.502:1092): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.509369 kernel: audit: type=1400 audit(1696273951.502:1093): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.511202 kernel: audit: type=1400 audit(1696273951.502:1094): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.513593 kernel: audit: type=1400 audit(1696273951.502:1095): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.518623 kernel: audit: type=1400 audit(1696273951.502:1096): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.518683 kernel: audit: type=1400 audit(1696273951.502:1097): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.521109 kernel: audit: type=1400 audit(1696273951.502:1098): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.527332 kernel: audit: type=1400 audit(1696273951.502:1099): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.527505 kernel: audit: type=1400 audit(1696273951.505:1100): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.505000 audit: BPF prog-id=127 op=LOAD Oct 2 19:12:31.505000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.505000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2388 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:31.505000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530373034366566623339666564346166343863323865633261333261 Oct 2 19:12:31.506000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.506000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2388 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:31.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530373034366566623339666564346166343863323865633261333261 Oct 2 19:12:31.506000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.506000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.506000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.506000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.506000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.506000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.506000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.506000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.506000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.506000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.506000 audit: BPF prog-id=128 op=LOAD Oct 2 19:12:31.506000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0001e1330 items=0 ppid=2388 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:31.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530373034366566623339666564346166343863323865633261333261 Oct 2 19:12:31.511000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.511000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.511000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.511000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.511000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.511000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.511000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.511000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.511000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.511000 audit: BPF prog-id=129 op=LOAD Oct 2 19:12:31.511000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0001e1378 items=0 ppid=2388 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:31.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530373034366566623339666564346166343863323865633261333261 Oct 2 19:12:31.516000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:12:31.516000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:12:31.516000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.516000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.516000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.516000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.516000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.516000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.516000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.516000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.516000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.516000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:31.516000 audit: BPF prog-id=130 op=LOAD Oct 2 19:12:31.516000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0001e1788 items=0 ppid=2388 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:31.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530373034366566623339666564346166343863323865633261333261 Oct 2 19:12:31.547607 env[1130]: time="2023-10-02T19:12:31.547477261Z" level=info msg="StartContainer for \"507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3\" returns successfully" Oct 2 19:12:31.565000 audit[2515]: AVC avc: denied { map_create } for pid=2515 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c524 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c521,c524 tclass=bpf permissive=0 Oct 2 19:12:31.565000 audit[2515]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c0006d57d0 a2=48 a3=c0006d57c0 items=0 ppid=2388 pid=2515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c521,c524 key=(null) Oct 2 19:12:31.565000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:12:32.514939 kubelet[2058]: E1002 19:12:32.514907 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:32.533084 kubelet[2058]: I1002 19:12:32.533036 2058 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" podStartSLOduration=-9.223372019321775e+09 pod.CreationTimestamp="2023-10-02 19:12:15 +0000 UTC" firstStartedPulling="2023-10-02 19:12:16.434068707 +0000 UTC m=+15.107452989" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:12:32.529775114 +0000 UTC m=+31.203159396" watchObservedRunningTime="2023-10-02 19:12:32.532999868 +0000 UTC m=+31.206384151" Oct 2 19:12:33.516466 kubelet[2058]: E1002 19:12:33.516416 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:34.403180 kubelet[2058]: W1002 19:12:34.403123 2058 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc8aa2c19_3f4f_4c8a_9d81_e59135bc56e7.slice/cri-containerd-5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8.scope WatchSource:0}: task 5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8 not found: not found Oct 2 19:12:34.413586 kubelet[2058]: I1002 19:12:34.413552 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:12:34.413586 kubelet[2058]: I1002 19:12:34.413579 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:12:34.415288 kubelet[2058]: I1002 19:12:34.415273 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:12:34.424206 kubelet[2058]: I1002 19:12:34.424178 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:12:34.424365 kubelet[2058]: I1002 19:12:34.424266 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:12:34.424365 kubelet[2058]: E1002 19:12:34.424290 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:12:34.424365 kubelet[2058]: E1002 19:12:34.424301 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:34.424365 kubelet[2058]: E1002 19:12:34.424309 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:12:34.424365 kubelet[2058]: E1002 19:12:34.424317 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:12:34.424365 kubelet[2058]: E1002 19:12:34.424329 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:12:34.424365 kubelet[2058]: E1002 19:12:34.424339 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:12:34.424365 kubelet[2058]: I1002 19:12:34.424350 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:12:39.636676 systemd[1]: Started sshd@7-10.0.0.65:22-10.0.0.1:45642.service. Oct 2 19:12:39.636000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.65:22-10.0.0.1:45642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:39.638172 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:12:39.638274 kernel: audit: type=1130 audit(1696273959.636:1110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.65:22-10.0.0.1:45642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:39.674000 audit[2538]: USER_ACCT pid=2538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:39.675555 sshd[2538]: Accepted publickey for core from 10.0.0.1 port 45642 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:12:39.677999 sshd[2538]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:39.676000 audit[2538]: CRED_ACQ pid=2538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:39.681291 kernel: audit: type=1101 audit(1696273959.674:1111): pid=2538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:39.681419 kernel: audit: type=1103 audit(1696273959.676:1112): pid=2538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:39.681442 kernel: audit: type=1006 audit(1696273959.676:1113): pid=2538 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:12:39.682940 kernel: audit: type=1300 audit(1696273959.676:1113): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4b3463e0 a2=3 a3=0 items=0 ppid=1 pid=2538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:39.676000 audit[2538]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4b3463e0 a2=3 a3=0 items=0 ppid=1 pid=2538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:39.683286 systemd-logind[1117]: New session 8 of user core. Oct 2 19:12:39.683806 systemd[1]: Started session-8.scope. Oct 2 19:12:39.676000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:39.686975 kernel: audit: type=1327 audit(1696273959.676:1113): proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:39.687000 audit[2538]: USER_START pid=2538 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:39.688000 audit[2540]: CRED_ACQ pid=2540 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:39.693471 kernel: audit: type=1105 audit(1696273959.687:1114): pid=2538 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:39.693517 kernel: audit: type=1103 audit(1696273959.688:1115): pid=2540 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:39.956752 sshd[2538]: pam_unix(sshd:session): session closed for user core Oct 2 19:12:39.956000 audit[2538]: USER_END pid=2538 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:39.958971 systemd[1]: sshd@7-10.0.0.65:22-10.0.0.1:45642.service: Deactivated successfully. Oct 2 19:12:39.959631 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:12:39.956000 audit[2538]: CRED_DISP pid=2538 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:39.962762 kernel: audit: type=1106 audit(1696273959.956:1116): pid=2538 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:39.962878 kernel: audit: type=1104 audit(1696273959.956:1117): pid=2538 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:39.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.65:22-10.0.0.1:45642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:39.963310 systemd-logind[1117]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:12:39.963961 systemd-logind[1117]: Removed session 8. Oct 2 19:12:44.436892 kubelet[2058]: I1002 19:12:44.436863 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:12:44.436892 kubelet[2058]: I1002 19:12:44.436895 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:12:44.438581 kubelet[2058]: I1002 19:12:44.437900 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:12:44.476086 kubelet[2058]: I1002 19:12:44.476055 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:12:44.476264 kubelet[2058]: I1002 19:12:44.476167 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:12:44.476264 kubelet[2058]: E1002 19:12:44.476192 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:12:44.476264 kubelet[2058]: E1002 19:12:44.476206 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:44.476264 kubelet[2058]: E1002 19:12:44.476217 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:12:44.476264 kubelet[2058]: E1002 19:12:44.476227 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:12:44.476264 kubelet[2058]: E1002 19:12:44.476237 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:12:44.476264 kubelet[2058]: E1002 19:12:44.476247 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:12:44.476264 kubelet[2058]: I1002 19:12:44.476256 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:12:45.448471 kubelet[2058]: E1002 19:12:45.448440 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:45.450179 env[1130]: time="2023-10-02T19:12:45.450135641Z" level=info msg="CreateContainer within sandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:12:45.851099 env[1130]: time="2023-10-02T19:12:45.850972063Z" level=info msg="CreateContainer within sandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94\"" Oct 2 19:12:45.851612 env[1130]: time="2023-10-02T19:12:45.851571044Z" level=info msg="StartContainer for \"a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94\"" Oct 2 19:12:45.865419 systemd[1]: Started cri-containerd-a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94.scope. Oct 2 19:12:45.871441 systemd[1]: cri-containerd-a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94.scope: Deactivated successfully. Oct 2 19:12:45.871653 systemd[1]: Stopped cri-containerd-a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94.scope. Oct 2 19:12:45.874886 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94-rootfs.mount: Deactivated successfully. Oct 2 19:12:45.997163 env[1130]: time="2023-10-02T19:12:45.997086251Z" level=info msg="shim disconnected" id=a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94 Oct 2 19:12:45.997163 env[1130]: time="2023-10-02T19:12:45.997140967Z" level=warning msg="cleaning up after shim disconnected" id=a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94 namespace=k8s.io Oct 2 19:12:45.997163 env[1130]: time="2023-10-02T19:12:45.997152580Z" level=info msg="cleaning up dead shim" Oct 2 19:12:46.004165 env[1130]: time="2023-10-02T19:12:46.004111712Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:12:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2576 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:12:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:12:46.004482 env[1130]: time="2023-10-02T19:12:46.004417855Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 19:12:46.004691 env[1130]: time="2023-10-02T19:12:46.004650305Z" level=error msg="Failed to pipe stderr of container \"a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94\"" error="reading from a closed fifo" Oct 2 19:12:46.004753 env[1130]: time="2023-10-02T19:12:46.004649804Z" level=error msg="Failed to pipe stdout of container \"a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94\"" error="reading from a closed fifo" Oct 2 19:12:46.011012 env[1130]: time="2023-10-02T19:12:46.010975596Z" level=error msg="StartContainer for \"a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:12:46.011278 kubelet[2058]: E1002 19:12:46.011240 2058 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94" Oct 2 19:12:46.011363 kubelet[2058]: E1002 19:12:46.011353 2058 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:12:46.011363 kubelet[2058]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:12:46.011363 kubelet[2058]: rm /hostbin/cilium-mount Oct 2 19:12:46.011363 kubelet[2058]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ncxcb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:12:46.011495 kubelet[2058]: E1002 19:12:46.011391 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:12:46.537259 kubelet[2058]: I1002 19:12:46.537223 2058 scope.go:115] "RemoveContainer" containerID="5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8" Oct 2 19:12:46.537582 kubelet[2058]: I1002 19:12:46.537511 2058 scope.go:115] "RemoveContainer" containerID="5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8" Oct 2 19:12:46.538649 env[1130]: time="2023-10-02T19:12:46.538602441Z" level=info msg="RemoveContainer for \"5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8\"" Oct 2 19:12:46.539023 env[1130]: time="2023-10-02T19:12:46.538986494Z" level=info msg="RemoveContainer for \"5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8\"" Oct 2 19:12:46.539171 env[1130]: time="2023-10-02T19:12:46.539093501Z" level=error msg="RemoveContainer for \"5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8\" failed" error="failed to set removing state for container \"5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8\": container is already in removing state" Oct 2 19:12:46.539402 kubelet[2058]: E1002 19:12:46.539277 2058 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8\": container is already in removing state" containerID="5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8" Oct 2 19:12:46.539402 kubelet[2058]: E1002 19:12:46.539307 2058 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8": container is already in removing state; Skipping pod "cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)" Oct 2 19:12:46.539402 kubelet[2058]: E1002 19:12:46.539371 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:46.539618 kubelet[2058]: E1002 19:12:46.539597 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:12:46.541952 env[1130]: time="2023-10-02T19:12:46.541913468Z" level=info msg="RemoveContainer for \"5c5241a6389352d6679c6d53c57eb11e6420585daf8c70b31777d818ac40b4c8\" returns successfully" Oct 2 19:12:49.101367 kubelet[2058]: W1002 19:12:49.101315 2058 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc8aa2c19_3f4f_4c8a_9d81_e59135bc56e7.slice/cri-containerd-a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94.scope WatchSource:0}: task a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94 not found: not found Oct 2 19:12:49.961426 systemd[1]: Started sshd@8-10.0.0.65:22-10.0.0.1:55950.service. Oct 2 19:12:49.960000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.65:22-10.0.0.1:55950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:49.962087 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:12:49.962175 kernel: audit: type=1130 audit(1696273969.960:1119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.65:22-10.0.0.1:55950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:49.997000 audit[2590]: USER_ACCT pid=2590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:49.998970 sshd[2590]: Accepted publickey for core from 10.0.0.1 port 55950 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:12:50.001532 sshd[2590]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:50.000000 audit[2590]: CRED_ACQ pid=2590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:50.004165 kernel: audit: type=1101 audit(1696273969.997:1120): pid=2590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:50.004213 kernel: audit: type=1103 audit(1696273970.000:1121): pid=2590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:50.004230 kernel: audit: type=1006 audit(1696273970.000:1122): pid=2590 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 19:12:50.000000 audit[2590]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda1d3ebc0 a2=3 a3=0 items=0 ppid=1 pid=2590 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.005987 systemd-logind[1117]: New session 9 of user core. Oct 2 19:12:50.006917 systemd[1]: Started session-9.scope. Oct 2 19:12:50.008044 kernel: audit: type=1300 audit(1696273970.000:1122): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda1d3ebc0 a2=3 a3=0 items=0 ppid=1 pid=2590 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:50.008091 kernel: audit: type=1327 audit(1696273970.000:1122): proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:50.000000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:50.010000 audit[2590]: USER_START pid=2590 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:50.012000 audit[2592]: CRED_ACQ pid=2592 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:50.016510 kernel: audit: type=1105 audit(1696273970.010:1123): pid=2590 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:50.016549 kernel: audit: type=1103 audit(1696273970.012:1124): pid=2592 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:50.109066 sshd[2590]: pam_unix(sshd:session): session closed for user core Oct 2 19:12:50.109000 audit[2590]: USER_END pid=2590 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:50.111520 systemd[1]: sshd@8-10.0.0.65:22-10.0.0.1:55950.service: Deactivated successfully. Oct 2 19:12:50.112350 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:12:50.109000 audit[2590]: CRED_DISP pid=2590 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:50.113691 systemd-logind[1117]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:12:50.114530 systemd-logind[1117]: Removed session 9. Oct 2 19:12:50.115651 kernel: audit: type=1106 audit(1696273970.109:1125): pid=2590 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:50.115712 kernel: audit: type=1104 audit(1696273970.109:1126): pid=2590 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:12:50.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.65:22-10.0.0.1:55950 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:54.492935 kubelet[2058]: I1002 19:12:54.492904 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:12:54.492935 kubelet[2058]: I1002 19:12:54.492938 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:12:54.495582 kubelet[2058]: I1002 19:12:54.495553 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:12:54.505458 kubelet[2058]: I1002 19:12:54.505423 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:12:54.505597 kubelet[2058]: I1002 19:12:54.505534 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:12:54.505597 kubelet[2058]: E1002 19:12:54.505559 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:12:54.505597 kubelet[2058]: E1002 19:12:54.505574 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:12:54.505597 kubelet[2058]: E1002 19:12:54.505586 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:12:54.505597 kubelet[2058]: E1002 19:12:54.505596 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:12:54.505756 kubelet[2058]: E1002 19:12:54.505609 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:12:54.505756 kubelet[2058]: E1002 19:12:54.505622 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:12:54.505756 kubelet[2058]: I1002 19:12:54.505635 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:12:57.381000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:57.383250 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:12:57.383376 kernel: audit: type=1400 audit(1696273977.381:1128): avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:57.381000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00107b620 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:12:57.390601 kernel: audit: type=1300 audit(1696273977.381:1128): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00107b620 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:12:57.390662 kernel: audit: type=1327 audit(1696273977.381:1128): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:57.381000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:57.381000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:57.416631 kernel: audit: type=1400 audit(1696273977.381:1129): avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:57.416694 kernel: audit: type=1300 audit(1696273977.381:1129): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000e476a0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:12:57.381000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000e476a0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:12:57.435999 kernel: audit: type=1327 audit(1696273977.381:1129): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:57.381000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:58.190000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:58.190000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:58.197956 kernel: audit: type=1400 audit(1696273978.190:1132): avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:58.198014 kernel: audit: type=1400 audit(1696273978.190:1131): avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:58.198126 kernel: audit: type=1400 audit(1696273978.190:1130): avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:58.190000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:58.190000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:58.204244 kernel: audit: type=1400 audit(1696273978.190:1133): avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:58.190000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c009899180 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:12:58.190000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00a0a0a80 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:12:58.190000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c00a286cc0 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:12:58.190000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:58.190000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:58.190000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:58.190000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00a2418f0 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:12:58.190000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:58.190000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:58.190000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c0098991a0 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:12:58.190000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:58.190000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:58.190000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00a286d20 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:12:58.190000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:12:59.447993 kubelet[2058]: E1002 19:12:59.447949 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:12:59.448403 kubelet[2058]: E1002 19:12:59.448151 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:13:00.114529 systemd[1]: Started sshd@9-10.0.0.65:22-10.0.0.1:43252.service. Oct 2 19:13:00.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.65:22-10.0.0.1:43252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:00.152000 audit[2604]: USER_ACCT pid=2604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:00.154661 sshd[2604]: Accepted publickey for core from 10.0.0.1 port 43252 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:13:00.153000 audit[2604]: CRED_ACQ pid=2604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:00.153000 audit[2604]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd6fd75a20 a2=3 a3=0 items=0 ppid=1 pid=2604 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:00.153000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:00.155944 sshd[2604]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:00.159950 systemd-logind[1117]: New session 10 of user core. Oct 2 19:13:00.161045 systemd[1]: Started session-10.scope. Oct 2 19:13:00.164000 audit[2604]: USER_START pid=2604 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:00.166000 audit[2606]: CRED_ACQ pid=2606 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:00.272684 sshd[2604]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:00.271000 audit[2604]: USER_END pid=2604 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:00.271000 audit[2604]: CRED_DISP pid=2604 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:00.274861 systemd[1]: sshd@9-10.0.0.65:22-10.0.0.1:43252.service: Deactivated successfully. Oct 2 19:13:00.275520 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:13:00.273000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.65:22-10.0.0.1:43252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:00.276051 systemd-logind[1117]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:13:00.276639 systemd-logind[1117]: Removed session 10. Oct 2 19:13:01.062000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:01.062000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cb97c0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:13:01.062000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:01.062000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:01.062000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:01.062000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c000f64dc0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:13:01.062000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:01.062000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001bf7200 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:13:01.062000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:01.062000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:01.062000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001bf7220 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:13:01.062000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:04.518631 kubelet[2058]: I1002 19:13:04.518598 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:04.518631 kubelet[2058]: I1002 19:13:04.518630 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:13:04.519763 kubelet[2058]: I1002 19:13:04.519744 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:13:04.531460 kubelet[2058]: I1002 19:13:04.531411 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:04.531628 kubelet[2058]: I1002 19:13:04.531543 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:13:04.531628 kubelet[2058]: E1002 19:13:04.531575 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:13:04.531628 kubelet[2058]: E1002 19:13:04.531591 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:13:04.531628 kubelet[2058]: E1002 19:13:04.531603 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:13:04.531628 kubelet[2058]: E1002 19:13:04.531615 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:13:04.531628 kubelet[2058]: E1002 19:13:04.531626 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:13:04.531828 kubelet[2058]: E1002 19:13:04.531639 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:13:04.531828 kubelet[2058]: I1002 19:13:04.531651 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:13:10.277425 systemd[1]: Started sshd@10-10.0.0.65:22-10.0.0.1:42058.service. Oct 2 19:13:10.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.65:22-10.0.0.1:42058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:10.278240 kernel: kauditd_printk_skb: 37 callbacks suppressed Oct 2 19:13:10.278334 kernel: audit: type=1130 audit(1696273990.276:1149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.65:22-10.0.0.1:42058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:10.315000 audit[2621]: USER_ACCT pid=2621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:10.316979 sshd[2621]: Accepted publickey for core from 10.0.0.1 port 42058 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:13:10.318000 audit[2621]: CRED_ACQ pid=2621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:10.319831 sshd[2621]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:10.322196 kernel: audit: type=1101 audit(1696273990.315:1150): pid=2621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:10.322253 kernel: audit: type=1103 audit(1696273990.318:1151): pid=2621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:10.322279 kernel: audit: type=1006 audit(1696273990.318:1152): pid=2621 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:13:10.324432 kernel: audit: type=1300 audit(1696273990.318:1152): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9ff6f5f0 a2=3 a3=0 items=0 ppid=1 pid=2621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:10.318000 audit[2621]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9ff6f5f0 a2=3 a3=0 items=0 ppid=1 pid=2621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:10.323853 systemd-logind[1117]: New session 11 of user core. Oct 2 19:13:10.324691 systemd[1]: Started session-11.scope. Oct 2 19:13:10.318000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:10.328715 kernel: audit: type=1327 audit(1696273990.318:1152): proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:10.328000 audit[2621]: USER_START pid=2621 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:10.328000 audit[2623]: CRED_ACQ pid=2623 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:10.334624 kernel: audit: type=1105 audit(1696273990.328:1153): pid=2621 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:10.334688 kernel: audit: type=1103 audit(1696273990.328:1154): pid=2623 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:10.447502 kubelet[2058]: E1002 19:13:10.447457 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:10.449348 env[1130]: time="2023-10-02T19:13:10.449305420Z" level=info msg="CreateContainer within sandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:13:10.457356 sshd[2621]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:10.457000 audit[2621]: USER_END pid=2621 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:10.459958 systemd[1]: sshd@10-10.0.0.65:22-10.0.0.1:42058.service: Deactivated successfully. Oct 2 19:13:10.460886 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:13:10.457000 audit[2621]: CRED_DISP pid=2621 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:10.461781 systemd-logind[1117]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:13:10.462583 systemd-logind[1117]: Removed session 11. Oct 2 19:13:10.463772 kernel: audit: type=1106 audit(1696273990.457:1155): pid=2621 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:10.463825 kernel: audit: type=1104 audit(1696273990.457:1156): pid=2621 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:10.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.65:22-10.0.0.1:42058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:10.665432 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2856136362.mount: Deactivated successfully. Oct 2 19:13:10.834775 env[1130]: time="2023-10-02T19:13:10.834709676Z" level=info msg="CreateContainer within sandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7\"" Oct 2 19:13:10.835513 env[1130]: time="2023-10-02T19:13:10.835455769Z" level=info msg="StartContainer for \"924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7\"" Oct 2 19:13:10.853873 systemd[1]: Started cri-containerd-924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7.scope. Oct 2 19:13:10.863171 systemd[1]: cri-containerd-924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7.scope: Deactivated successfully. Oct 2 19:13:10.863453 systemd[1]: Stopped cri-containerd-924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7.scope. Oct 2 19:13:10.866781 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7-rootfs.mount: Deactivated successfully. Oct 2 19:13:10.973508 env[1130]: time="2023-10-02T19:13:10.973350444Z" level=info msg="shim disconnected" id=924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7 Oct 2 19:13:10.973508 env[1130]: time="2023-10-02T19:13:10.973427181Z" level=warning msg="cleaning up after shim disconnected" id=924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7 namespace=k8s.io Oct 2 19:13:10.973508 env[1130]: time="2023-10-02T19:13:10.973442360Z" level=info msg="cleaning up dead shim" Oct 2 19:13:10.979656 env[1130]: time="2023-10-02T19:13:10.979600303Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:13:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2659 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:13:10Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:13:10.979911 env[1130]: time="2023-10-02T19:13:10.979852664Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:13:10.983920 env[1130]: time="2023-10-02T19:13:10.983848104Z" level=error msg="Failed to pipe stdout of container \"924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7\"" error="reading from a closed fifo" Oct 2 19:13:10.984799 env[1130]: time="2023-10-02T19:13:10.984738642Z" level=error msg="Failed to pipe stderr of container \"924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7\"" error="reading from a closed fifo" Oct 2 19:13:11.009931 env[1130]: time="2023-10-02T19:13:11.009856094Z" level=error msg="StartContainer for \"924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:13:11.010203 kubelet[2058]: E1002 19:13:11.010125 2058 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7" Oct 2 19:13:11.010305 kubelet[2058]: E1002 19:13:11.010262 2058 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:13:11.010305 kubelet[2058]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:13:11.010305 kubelet[2058]: rm /hostbin/cilium-mount Oct 2 19:13:11.010305 kubelet[2058]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ncxcb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:13:11.010520 kubelet[2058]: E1002 19:13:11.010314 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:13:11.584974 kubelet[2058]: I1002 19:13:11.584938 2058 scope.go:115] "RemoveContainer" containerID="a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94" Oct 2 19:13:11.585452 kubelet[2058]: I1002 19:13:11.585213 2058 scope.go:115] "RemoveContainer" containerID="a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94" Oct 2 19:13:11.586983 env[1130]: time="2023-10-02T19:13:11.586943136Z" level=info msg="RemoveContainer for \"a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94\"" Oct 2 19:13:11.587348 env[1130]: time="2023-10-02T19:13:11.587278316Z" level=info msg="RemoveContainer for \"a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94\"" Oct 2 19:13:11.587526 env[1130]: time="2023-10-02T19:13:11.587400327Z" level=error msg="RemoveContainer for \"a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94\" failed" error="failed to set removing state for container \"a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94\": container is already in removing state" Oct 2 19:13:11.587813 kubelet[2058]: E1002 19:13:11.587756 2058 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94\": container is already in removing state" containerID="a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94" Oct 2 19:13:11.587894 kubelet[2058]: E1002 19:13:11.587849 2058 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94": container is already in removing state; Skipping pod "cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)" Oct 2 19:13:11.587938 kubelet[2058]: E1002 19:13:11.587921 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:11.588194 kubelet[2058]: E1002 19:13:11.588175 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:13:11.625387 env[1130]: time="2023-10-02T19:13:11.625324690Z" level=info msg="RemoveContainer for \"a506cfcaaa949159ae2fed7d2c3663120fa9afc656d5496a64ac8b56c17c5f94\" returns successfully" Oct 2 19:13:14.078215 kubelet[2058]: W1002 19:13:14.078170 2058 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc8aa2c19_3f4f_4c8a_9d81_e59135bc56e7.slice/cri-containerd-924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7.scope WatchSource:0}: task 924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7 not found: not found Oct 2 19:13:14.543521 kubelet[2058]: I1002 19:13:14.543484 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:14.543521 kubelet[2058]: I1002 19:13:14.543513 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:13:14.544608 kubelet[2058]: I1002 19:13:14.544569 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:13:14.552949 kubelet[2058]: I1002 19:13:14.552922 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:14.553095 kubelet[2058]: I1002 19:13:14.553006 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:13:14.553095 kubelet[2058]: E1002 19:13:14.553036 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:13:14.553095 kubelet[2058]: E1002 19:13:14.553053 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:13:14.553095 kubelet[2058]: E1002 19:13:14.553064 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:13:14.553095 kubelet[2058]: E1002 19:13:14.553076 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:13:14.553095 kubelet[2058]: E1002 19:13:14.553087 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:13:14.553259 kubelet[2058]: E1002 19:13:14.553099 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:13:14.553259 kubelet[2058]: I1002 19:13:14.553111 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:13:16.448200 kubelet[2058]: E1002 19:13:16.448151 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:20.448219 kubelet[2058]: E1002 19:13:20.448174 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:20.461522 systemd[1]: Started sshd@11-10.0.0.65:22-10.0.0.1:41064.service. Oct 2 19:13:20.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.65:22-10.0.0.1:41064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:20.462469 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:13:20.462521 kernel: audit: type=1130 audit(1696274000.460:1158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.65:22-10.0.0.1:41064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:20.499000 audit[2674]: USER_ACCT pid=2674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:20.500390 sshd[2674]: Accepted publickey for core from 10.0.0.1 port 41064 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:13:20.502103 sshd[2674]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:20.501000 audit[2674]: CRED_ACQ pid=2674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:20.505469 systemd-logind[1117]: New session 12 of user core. Oct 2 19:13:20.506026 kernel: audit: type=1101 audit(1696274000.499:1159): pid=2674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:20.506107 kernel: audit: type=1103 audit(1696274000.501:1160): pid=2674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:20.506134 kernel: audit: type=1006 audit(1696274000.501:1161): pid=2674 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:13:20.506465 systemd[1]: Started session-12.scope. Oct 2 19:13:20.507715 kernel: audit: type=1300 audit(1696274000.501:1161): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb958b800 a2=3 a3=0 items=0 ppid=1 pid=2674 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:20.501000 audit[2674]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb958b800 a2=3 a3=0 items=0 ppid=1 pid=2674 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:20.501000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:20.511850 kernel: audit: type=1327 audit(1696274000.501:1161): proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:20.511892 kernel: audit: type=1105 audit(1696274000.510:1162): pid=2674 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:20.510000 audit[2674]: USER_START pid=2674 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:20.511000 audit[2676]: CRED_ACQ pid=2676 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:20.517082 kernel: audit: type=1103 audit(1696274000.511:1163): pid=2676 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:20.621991 sshd[2674]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:20.622000 audit[2674]: USER_END pid=2674 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:20.623951 systemd[1]: sshd@11-10.0.0.65:22-10.0.0.1:41064.service: Deactivated successfully. Oct 2 19:13:20.624597 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:13:20.625090 systemd-logind[1117]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:13:20.625701 systemd-logind[1117]: Removed session 12. Oct 2 19:13:20.622000 audit[2674]: CRED_DISP pid=2674 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:20.628209 kernel: audit: type=1106 audit(1696274000.622:1164): pid=2674 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:20.628255 kernel: audit: type=1104 audit(1696274000.622:1165): pid=2674 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:20.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.65:22-10.0.0.1:41064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:22.447580 kubelet[2058]: E1002 19:13:22.447541 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:22.448007 kubelet[2058]: E1002 19:13:22.447748 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:13:24.564440 kubelet[2058]: I1002 19:13:24.564410 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:24.564440 kubelet[2058]: I1002 19:13:24.564447 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:13:24.565685 kubelet[2058]: I1002 19:13:24.565670 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:13:24.575164 kubelet[2058]: I1002 19:13:24.575132 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:24.575278 kubelet[2058]: I1002 19:13:24.575211 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:13:24.575278 kubelet[2058]: E1002 19:13:24.575233 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:13:24.575278 kubelet[2058]: E1002 19:13:24.575247 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:13:24.575278 kubelet[2058]: E1002 19:13:24.575260 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:13:24.575278 kubelet[2058]: E1002 19:13:24.575273 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:13:24.575418 kubelet[2058]: E1002 19:13:24.575285 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:13:24.575418 kubelet[2058]: E1002 19:13:24.575295 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:13:24.575418 kubelet[2058]: I1002 19:13:24.575306 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:13:28.448035 kubelet[2058]: E1002 19:13:28.447986 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:30.627303 systemd[1]: Started sshd@12-10.0.0.65:22-10.0.0.1:49488.service. Oct 2 19:13:30.628526 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:13:30.628561 kernel: audit: type=1130 audit(1696274010.626:1167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.65:22-10.0.0.1:49488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:30.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.65:22-10.0.0.1:49488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:30.662000 audit[2688]: USER_ACCT pid=2688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:30.663389 sshd[2688]: Accepted publickey for core from 10.0.0.1 port 49488 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:13:30.668525 sshd[2688]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:30.674178 systemd[1]: Started session-13.scope. Oct 2 19:13:30.674765 systemd-logind[1117]: New session 13 of user core. Oct 2 19:13:30.667000 audit[2688]: CRED_ACQ pid=2688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:30.680446 kernel: audit: type=1101 audit(1696274010.662:1168): pid=2688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:30.680518 kernel: audit: type=1103 audit(1696274010.667:1169): pid=2688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:30.680546 kernel: audit: type=1006 audit(1696274010.667:1170): pid=2688 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:13:30.681898 kernel: audit: type=1300 audit(1696274010.667:1170): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeaa441170 a2=3 a3=0 items=0 ppid=1 pid=2688 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:30.667000 audit[2688]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeaa441170 a2=3 a3=0 items=0 ppid=1 pid=2688 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:30.667000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:30.679000 audit[2688]: USER_START pid=2688 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:30.751032 kernel: audit: type=1327 audit(1696274010.667:1170): proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:30.751206 kernel: audit: type=1105 audit(1696274010.679:1171): pid=2688 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:30.751251 kernel: audit: type=1103 audit(1696274010.681:1172): pid=2690 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:30.681000 audit[2690]: CRED_ACQ pid=2690 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:30.845513 sshd[2688]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:30.845000 audit[2688]: USER_END pid=2688 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:30.847819 systemd[1]: sshd@12-10.0.0.65:22-10.0.0.1:49488.service: Deactivated successfully. Oct 2 19:13:30.848655 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:13:30.849378 systemd-logind[1117]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:13:30.850083 systemd-logind[1117]: Removed session 13. Oct 2 19:13:30.845000 audit[2688]: CRED_DISP pid=2688 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:30.899892 kernel: audit: type=1106 audit(1696274010.845:1173): pid=2688 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:30.900041 kernel: audit: type=1104 audit(1696274010.845:1174): pid=2688 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:30.845000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.65:22-10.0.0.1:49488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:34.447951 kubelet[2058]: E1002 19:13:34.447893 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:34.588467 kubelet[2058]: I1002 19:13:34.588426 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:34.588467 kubelet[2058]: I1002 19:13:34.588462 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:13:34.590000 kubelet[2058]: I1002 19:13:34.589975 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:13:34.599641 kubelet[2058]: I1002 19:13:34.599610 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:34.599842 kubelet[2058]: I1002 19:13:34.599681 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:13:34.599842 kubelet[2058]: E1002 19:13:34.599704 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:13:34.599842 kubelet[2058]: E1002 19:13:34.599714 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:13:34.599842 kubelet[2058]: E1002 19:13:34.599725 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:13:34.599842 kubelet[2058]: E1002 19:13:34.599734 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:13:34.599842 kubelet[2058]: E1002 19:13:34.599744 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:13:34.599842 kubelet[2058]: E1002 19:13:34.599754 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:13:34.599842 kubelet[2058]: I1002 19:13:34.599764 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:13:35.448307 kubelet[2058]: E1002 19:13:35.448271 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:35.448713 kubelet[2058]: E1002 19:13:35.448537 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:13:40.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.65:22-10.0.0.1:38268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:40.849494 systemd[1]: Started sshd@13-10.0.0.65:22-10.0.0.1:38268.service. Oct 2 19:13:40.850226 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:13:40.850250 kernel: audit: type=1130 audit(1696274020.847:1176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.65:22-10.0.0.1:38268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:40.884000 audit[2702]: USER_ACCT pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:40.886021 sshd[2702]: Accepted publickey for core from 10.0.0.1 port 38268 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:13:40.888177 sshd[2702]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:40.886000 audit[2702]: CRED_ACQ pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:40.891025 kernel: audit: type=1101 audit(1696274020.884:1177): pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:40.891091 kernel: audit: type=1103 audit(1696274020.886:1178): pid=2702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:40.891116 kernel: audit: type=1006 audit(1696274020.886:1179): pid=2702 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:13:40.891436 systemd-logind[1117]: New session 14 of user core. Oct 2 19:13:40.892391 systemd[1]: Started session-14.scope. Oct 2 19:13:40.896353 kernel: audit: type=1300 audit(1696274020.886:1179): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc84309730 a2=3 a3=0 items=0 ppid=1 pid=2702 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:40.896523 kernel: audit: type=1327 audit(1696274020.886:1179): proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:40.886000 audit[2702]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc84309730 a2=3 a3=0 items=0 ppid=1 pid=2702 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:40.886000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:40.894000 audit[2702]: USER_START pid=2702 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:40.895000 audit[2704]: CRED_ACQ pid=2704 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:40.902098 kernel: audit: type=1105 audit(1696274020.894:1180): pid=2702 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:40.902190 kernel: audit: type=1103 audit(1696274020.895:1181): pid=2704 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:40.993642 sshd[2702]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:40.992000 audit[2702]: USER_END pid=2702 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:40.992000 audit[2702]: CRED_DISP pid=2702 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:40.996623 systemd[1]: sshd@13-10.0.0.65:22-10.0.0.1:38268.service: Deactivated successfully. Oct 2 19:13:40.997518 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:13:40.998846 systemd-logind[1117]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:13:40.999682 systemd-logind[1117]: Removed session 14. Oct 2 19:13:40.999840 kernel: audit: type=1106 audit(1696274020.992:1182): pid=2702 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:40.999884 kernel: audit: type=1104 audit(1696274020.992:1183): pid=2702 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:40.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.65:22-10.0.0.1:38268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:44.611699 kubelet[2058]: I1002 19:13:44.611666 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:44.611699 kubelet[2058]: I1002 19:13:44.611703 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:13:44.612993 kubelet[2058]: I1002 19:13:44.612975 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:13:44.622388 kubelet[2058]: I1002 19:13:44.622347 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:44.622549 kubelet[2058]: I1002 19:13:44.622435 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:13:44.622549 kubelet[2058]: E1002 19:13:44.622462 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:13:44.622549 kubelet[2058]: E1002 19:13:44.622476 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:13:44.622549 kubelet[2058]: E1002 19:13:44.622486 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:13:44.622549 kubelet[2058]: E1002 19:13:44.622496 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:13:44.622549 kubelet[2058]: E1002 19:13:44.622507 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:13:44.622549 kubelet[2058]: E1002 19:13:44.622517 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:13:44.622549 kubelet[2058]: I1002 19:13:44.622528 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:13:47.447670 kubelet[2058]: E1002 19:13:47.447638 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:47.448284 kubelet[2058]: E1002 19:13:47.448267 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:13:50.998828 systemd[1]: Started sshd@14-10.0.0.65:22-10.0.0.1:57382.service. Oct 2 19:13:50.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.65:22-10.0.0.1:57382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:51.002287 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:13:51.002361 kernel: audit: type=1130 audit(1696274030.998:1185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.65:22-10.0.0.1:57382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:51.035000 audit[2719]: USER_ACCT pid=2719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:51.037000 sshd[2719]: Accepted publickey for core from 10.0.0.1 port 57382 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:13:51.039829 sshd[2719]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:13:51.038000 audit[2719]: CRED_ACQ pid=2719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:51.044106 kernel: audit: type=1101 audit(1696274031.035:1186): pid=2719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:51.044215 kernel: audit: type=1103 audit(1696274031.038:1187): pid=2719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:51.044234 kernel: audit: type=1006 audit(1696274031.038:1188): pid=2719 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:13:51.045060 systemd-logind[1117]: New session 15 of user core. Oct 2 19:13:51.045563 systemd[1]: Started session-15.scope. Oct 2 19:13:51.046300 kernel: audit: type=1300 audit(1696274031.038:1188): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe540a9490 a2=3 a3=0 items=0 ppid=1 pid=2719 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:51.038000 audit[2719]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe540a9490 a2=3 a3=0 items=0 ppid=1 pid=2719 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:51.049538 kernel: audit: type=1327 audit(1696274031.038:1188): proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:51.038000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:13:51.049000 audit[2719]: USER_START pid=2719 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:51.054355 kernel: audit: type=1105 audit(1696274031.049:1189): pid=2719 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:51.054441 kernel: audit: type=1103 audit(1696274031.050:1190): pid=2721 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:51.050000 audit[2721]: CRED_ACQ pid=2721 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:51.159315 sshd[2719]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:51.159000 audit[2719]: USER_END pid=2719 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:51.162414 systemd[1]: sshd@14-10.0.0.65:22-10.0.0.1:57382.service: Deactivated successfully. Oct 2 19:13:51.163337 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:13:51.159000 audit[2719]: CRED_DISP pid=2719 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:51.164066 systemd-logind[1117]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:13:51.165024 systemd-logind[1117]: Removed session 15. Oct 2 19:13:51.166989 kernel: audit: type=1106 audit(1696274031.159:1191): pid=2719 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:51.167057 kernel: audit: type=1104 audit(1696274031.159:1192): pid=2719 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:13:51.161000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.65:22-10.0.0.1:57382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:54.638427 kubelet[2058]: I1002 19:13:54.638384 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:54.638427 kubelet[2058]: I1002 19:13:54.638428 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:13:54.639775 kubelet[2058]: I1002 19:13:54.639752 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:13:54.651111 kubelet[2058]: I1002 19:13:54.651082 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:13:54.651276 kubelet[2058]: I1002 19:13:54.651183 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:13:54.651276 kubelet[2058]: E1002 19:13:54.651213 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:13:54.651276 kubelet[2058]: E1002 19:13:54.651264 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:13:54.651380 kubelet[2058]: E1002 19:13:54.651281 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:13:54.651380 kubelet[2058]: E1002 19:13:54.651293 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:13:54.651380 kubelet[2058]: E1002 19:13:54.651308 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:13:54.651380 kubelet[2058]: E1002 19:13:54.651320 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:13:54.651380 kubelet[2058]: I1002 19:13:54.651333 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:13:57.383000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:57.383970 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:13:57.384011 kernel: audit: type=1400 audit(1696274037.383:1194): avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:57.383000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:57.389963 kernel: audit: type=1400 audit(1696274037.383:1195): avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:57.383000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0024a0780 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:13:57.394058 kernel: audit: type=1300 audit(1696274037.383:1194): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0024a0780 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:13:57.394168 kernel: audit: type=1327 audit(1696274037.383:1194): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:57.383000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:57.398247 kernel: audit: type=1300 audit(1696274037.383:1195): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0024ea0c0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:13:57.383000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0024ea0c0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:13:57.401514 kernel: audit: type=1327 audit(1696274037.383:1195): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:57.383000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:57.448001 kubelet[2058]: E1002 19:13:57.447967 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:13:58.192000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:58.192000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00fc39860 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:13:58.200074 kernel: audit: type=1400 audit(1696274038.192:1196): avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:58.200273 kernel: audit: type=1300 audit(1696274038.192:1196): arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00fc39860 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:13:58.200302 kernel: audit: type=1327 audit(1696274038.192:1196): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:13:58.192000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:13:58.203277 kernel: audit: type=1400 audit(1696274038.192:1197): avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:58.192000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:58.192000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c000bada70 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:13:58.192000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:13:58.192000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:58.192000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00e4dfa80 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:13:58.192000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:13:58.192000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:58.192000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00e537080 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:13:58.192000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:13:58.192000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:58.192000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c00fc39950 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:13:58.192000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:13:58.192000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:58.192000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00fc9bb30 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:13:58.192000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:14:00.448266 kubelet[2058]: E1002 19:14:00.448216 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:14:00.450649 env[1130]: time="2023-10-02T19:14:00.450590802Z" level=info msg="CreateContainer within sandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:14:00.464374 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount667706174.mount: Deactivated successfully. Oct 2 19:14:00.470907 env[1130]: time="2023-10-02T19:14:00.470830784Z" level=info msg="CreateContainer within sandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1\"" Oct 2 19:14:00.471611 env[1130]: time="2023-10-02T19:14:00.471529572Z" level=info msg="StartContainer for \"8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1\"" Oct 2 19:14:00.490803 systemd[1]: Started cri-containerd-8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1.scope. Oct 2 19:14:00.500510 systemd[1]: cri-containerd-8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1.scope: Deactivated successfully. Oct 2 19:14:00.500875 systemd[1]: Stopped cri-containerd-8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1.scope. Oct 2 19:14:00.513037 env[1130]: time="2023-10-02T19:14:00.512966742Z" level=info msg="shim disconnected" id=8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1 Oct 2 19:14:00.513037 env[1130]: time="2023-10-02T19:14:00.513030673Z" level=warning msg="cleaning up after shim disconnected" id=8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1 namespace=k8s.io Oct 2 19:14:00.513037 env[1130]: time="2023-10-02T19:14:00.513042725Z" level=info msg="cleaning up dead shim" Oct 2 19:14:00.523441 env[1130]: time="2023-10-02T19:14:00.523355680Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:14:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2755 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:14:00Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:14:00.524579 env[1130]: time="2023-10-02T19:14:00.523727963Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:14:00.524579 env[1130]: time="2023-10-02T19:14:00.524481485Z" level=error msg="Failed to pipe stdout of container \"8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1\"" error="reading from a closed fifo" Oct 2 19:14:00.524579 env[1130]: time="2023-10-02T19:14:00.524453061Z" level=error msg="Failed to pipe stderr of container \"8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1\"" error="reading from a closed fifo" Oct 2 19:14:00.527750 env[1130]: time="2023-10-02T19:14:00.527665314Z" level=error msg="StartContainer for \"8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:14:00.528172 kubelet[2058]: E1002 19:14:00.528133 2058 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1" Oct 2 19:14:00.528298 kubelet[2058]: E1002 19:14:00.528285 2058 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:14:00.528298 kubelet[2058]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:14:00.528298 kubelet[2058]: rm /hostbin/cilium-mount Oct 2 19:14:00.528298 kubelet[2058]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ncxcb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:14:00.528477 kubelet[2058]: E1002 19:14:00.528345 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:14:00.665820 kubelet[2058]: I1002 19:14:00.665710 2058 scope.go:115] "RemoveContainer" containerID="924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7" Oct 2 19:14:00.666304 kubelet[2058]: I1002 19:14:00.666289 2058 scope.go:115] "RemoveContainer" containerID="924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7" Oct 2 19:14:00.666993 env[1130]: time="2023-10-02T19:14:00.666947026Z" level=info msg="RemoveContainer for \"924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7\"" Oct 2 19:14:00.667637 env[1130]: time="2023-10-02T19:14:00.667606321Z" level=info msg="RemoveContainer for \"924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7\"" Oct 2 19:14:00.667724 env[1130]: time="2023-10-02T19:14:00.667688686Z" level=error msg="RemoveContainer for \"924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7\" failed" error="failed to set removing state for container \"924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7\": container is already in removing state" Oct 2 19:14:00.667935 kubelet[2058]: E1002 19:14:00.667917 2058 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7\": container is already in removing state" containerID="924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7" Oct 2 19:14:00.667995 kubelet[2058]: E1002 19:14:00.667982 2058 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7": container is already in removing state; Skipping pod "cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)" Oct 2 19:14:00.668054 kubelet[2058]: E1002 19:14:00.668043 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:14:00.668364 kubelet[2058]: E1002 19:14:00.668346 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:14:00.671162 env[1130]: time="2023-10-02T19:14:00.671117298Z" level=info msg="RemoveContainer for \"924789542a7be136b32523741b3523b20390fa2748f9e9032f1d79d54e2da1f7\" returns successfully" Oct 2 19:14:01.064000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:01.064000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:01.064000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002698680 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:14:01.064000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002251ca0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:14:01.064000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:01.064000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:01.064000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:01.064000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002454940 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:14:01.064000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:01.064000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:01.064000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0024a07a0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:14:01.064000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:01.163872 systemd[1]: Started sshd@15-10.0.0.65:22-10.0.0.1:56030.service. Oct 2 19:14:01.163000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.65:22-10.0.0.1:56030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:01.207000 audit[2768]: USER_ACCT pid=2768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:01.208868 sshd[2768]: Accepted publickey for core from 10.0.0.1 port 56030 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:14:01.209000 audit[2768]: CRED_ACQ pid=2768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:01.209000 audit[2768]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe708a8f50 a2=3 a3=0 items=0 ppid=1 pid=2768 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:01.209000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:01.210423 sshd[2768]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:14:01.215278 systemd-logind[1117]: New session 16 of user core. Oct 2 19:14:01.216481 systemd[1]: Started session-16.scope. Oct 2 19:14:01.220000 audit[2768]: USER_START pid=2768 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:01.222000 audit[2770]: CRED_ACQ pid=2770 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:01.337006 sshd[2768]: pam_unix(sshd:session): session closed for user core Oct 2 19:14:01.337000 audit[2768]: USER_END pid=2768 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:01.337000 audit[2768]: CRED_DISP pid=2768 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:01.339956 systemd[1]: sshd@15-10.0.0.65:22-10.0.0.1:56030.service: Deactivated successfully. Oct 2 19:14:01.339000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.65:22-10.0.0.1:56030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:01.340920 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:14:01.341505 systemd-logind[1117]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:14:01.342337 systemd-logind[1117]: Removed session 16. Oct 2 19:14:01.458123 kubelet[2058]: E1002 19:14:01.458045 2058 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:14:01.462153 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1-rootfs.mount: Deactivated successfully. Oct 2 19:14:01.479823 kubelet[2058]: E1002 19:14:01.479778 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:14:03.618781 kubelet[2058]: W1002 19:14:03.618250 2058 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc8aa2c19_3f4f_4c8a_9d81_e59135bc56e7.slice/cri-containerd-8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1.scope WatchSource:0}: task 8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1 not found: not found Oct 2 19:14:04.672275 kubelet[2058]: I1002 19:14:04.671385 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:04.672275 kubelet[2058]: I1002 19:14:04.671419 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:14:04.674655 kubelet[2058]: I1002 19:14:04.674617 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:14:04.687355 kubelet[2058]: I1002 19:14:04.687321 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:04.687496 kubelet[2058]: I1002 19:14:04.687439 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:14:04.687496 kubelet[2058]: E1002 19:14:04.687483 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:14:04.687543 kubelet[2058]: E1002 19:14:04.687503 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:14:04.687543 kubelet[2058]: E1002 19:14:04.687518 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:14:04.687543 kubelet[2058]: E1002 19:14:04.687530 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:14:04.687615 kubelet[2058]: E1002 19:14:04.687544 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:14:04.687615 kubelet[2058]: E1002 19:14:04.687570 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:14:04.687615 kubelet[2058]: I1002 19:14:04.687582 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:14:06.480811 kubelet[2058]: E1002 19:14:06.480753 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:14:11.342186 systemd[1]: Started sshd@16-10.0.0.65:22-10.0.0.1:57454.service. Oct 2 19:14:11.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.65:22-10.0.0.1:57454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:11.342856 kernel: kauditd_printk_skb: 37 callbacks suppressed Oct 2 19:14:11.342910 kernel: audit: type=1130 audit(1696274051.341:1215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.65:22-10.0.0.1:57454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:11.377000 audit[2784]: USER_ACCT pid=2784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:11.378758 sshd[2784]: Accepted publickey for core from 10.0.0.1 port 57454 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:14:11.380000 audit[2784]: CRED_ACQ pid=2784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:11.381774 sshd[2784]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:14:11.384178 kernel: audit: type=1101 audit(1696274051.377:1216): pid=2784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:11.384301 kernel: audit: type=1103 audit(1696274051.380:1217): pid=2784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:11.384331 kernel: audit: type=1006 audit(1696274051.380:1218): pid=2784 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:14:11.385809 systemd-logind[1117]: New session 17 of user core. Oct 2 19:14:11.380000 audit[2784]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffdfc739a0 a2=3 a3=0 items=0 ppid=1 pid=2784 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:11.387088 systemd[1]: Started session-17.scope. Oct 2 19:14:11.389190 kernel: audit: type=1300 audit(1696274051.380:1218): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffdfc739a0 a2=3 a3=0 items=0 ppid=1 pid=2784 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:11.389226 kernel: audit: type=1327 audit(1696274051.380:1218): proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:11.380000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:11.390000 audit[2784]: USER_START pid=2784 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:11.392000 audit[2786]: CRED_ACQ pid=2786 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:11.397131 kernel: audit: type=1105 audit(1696274051.390:1219): pid=2784 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:11.397173 kernel: audit: type=1103 audit(1696274051.392:1220): pid=2786 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:11.482411 kubelet[2058]: E1002 19:14:11.482381 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:14:11.521644 sshd[2784]: pam_unix(sshd:session): session closed for user core Oct 2 19:14:11.521000 audit[2784]: USER_END pid=2784 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:11.524746 systemd[1]: sshd@16-10.0.0.65:22-10.0.0.1:57454.service: Deactivated successfully. Oct 2 19:14:11.525399 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:14:11.522000 audit[2784]: CRED_DISP pid=2784 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:11.526067 systemd-logind[1117]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:14:11.527395 systemd[1]: Started sshd@17-10.0.0.65:22-10.0.0.1:57468.service. Oct 2 19:14:11.529282 kernel: audit: type=1106 audit(1696274051.521:1221): pid=2784 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:11.529346 kernel: audit: type=1104 audit(1696274051.522:1222): pid=2784 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:11.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.65:22-10.0.0.1:57454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:11.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.65:22-10.0.0.1:57468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:11.532899 systemd-logind[1117]: Removed session 17. Oct 2 19:14:11.561000 audit[2798]: USER_ACCT pid=2798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:11.562975 sshd[2798]: Accepted publickey for core from 10.0.0.1 port 57468 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:14:11.562000 audit[2798]: CRED_ACQ pid=2798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:11.562000 audit[2798]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc0c313a50 a2=3 a3=0 items=0 ppid=1 pid=2798 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:11.562000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:11.564087 sshd[2798]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:14:11.567699 systemd-logind[1117]: New session 18 of user core. Oct 2 19:14:11.568593 systemd[1]: Started session-18.scope. Oct 2 19:14:11.571000 audit[2798]: USER_START pid=2798 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:11.572000 audit[2800]: CRED_ACQ pid=2800 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:12.470646 sshd[2798]: pam_unix(sshd:session): session closed for user core Oct 2 19:14:12.472000 audit[2798]: USER_END pid=2798 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:12.472000 audit[2798]: CRED_DISP pid=2798 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:12.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.65:22-10.0.0.1:41548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:12.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.65:22-10.0.0.1:57468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:12.475911 systemd[1]: Started sshd@18-10.0.0.65:22-10.0.0.1:41548.service. Oct 2 19:14:12.478319 systemd[1]: sshd@17-10.0.0.65:22-10.0.0.1:57468.service: Deactivated successfully. Oct 2 19:14:12.479322 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:14:12.482549 systemd-logind[1117]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:14:12.483665 systemd-logind[1117]: Removed session 18. Oct 2 19:14:12.517000 audit[2808]: USER_ACCT pid=2808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:12.518621 sshd[2808]: Accepted publickey for core from 10.0.0.1 port 41548 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:14:12.518000 audit[2808]: CRED_ACQ pid=2808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:12.518000 audit[2808]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd9c5c5960 a2=3 a3=0 items=0 ppid=1 pid=2808 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:12.518000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:12.519781 sshd[2808]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:14:12.523160 systemd-logind[1117]: New session 19 of user core. Oct 2 19:14:12.524203 systemd[1]: Started session-19.scope. Oct 2 19:14:12.527000 audit[2808]: USER_START pid=2808 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:12.528000 audit[2811]: CRED_ACQ pid=2811 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:12.629137 sshd[2808]: pam_unix(sshd:session): session closed for user core Oct 2 19:14:12.629000 audit[2808]: USER_END pid=2808 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:12.629000 audit[2808]: CRED_DISP pid=2808 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:12.631851 systemd[1]: sshd@18-10.0.0.65:22-10.0.0.1:41548.service: Deactivated successfully. Oct 2 19:14:12.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.65:22-10.0.0.1:41548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:12.632578 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:14:12.633481 systemd-logind[1117]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:14:12.634222 systemd-logind[1117]: Removed session 19. Oct 2 19:14:14.448358 kubelet[2058]: E1002 19:14:14.448310 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:14:14.448814 kubelet[2058]: E1002 19:14:14.448594 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:14:14.697748 kubelet[2058]: I1002 19:14:14.697711 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:14.697748 kubelet[2058]: I1002 19:14:14.697748 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:14:14.698816 kubelet[2058]: I1002 19:14:14.698743 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:14:14.706954 kubelet[2058]: I1002 19:14:14.706913 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:14.707095 kubelet[2058]: I1002 19:14:14.707017 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:14:14.707095 kubelet[2058]: E1002 19:14:14.707038 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:14:14.707095 kubelet[2058]: E1002 19:14:14.707048 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:14:14.707095 kubelet[2058]: E1002 19:14:14.707057 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:14:14.707095 kubelet[2058]: E1002 19:14:14.707065 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:14:14.707095 kubelet[2058]: E1002 19:14:14.707077 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:14:14.707095 kubelet[2058]: E1002 19:14:14.707085 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:14:14.707095 kubelet[2058]: I1002 19:14:14.707093 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:14:16.484162 kubelet[2058]: E1002 19:14:16.484127 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:14:18.447938 kubelet[2058]: E1002 19:14:18.447889 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:14:21.484992 kubelet[2058]: E1002 19:14:21.484956 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:14:22.633322 systemd[1]: Started sshd@19-10.0.0.65:22-10.0.0.1:49716.service. Oct 2 19:14:22.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.65:22-10.0.0.1:49716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:22.634317 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:14:22.634363 kernel: audit: type=1130 audit(1696274062.632:1242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.65:22-10.0.0.1:49716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:22.672000 audit[2824]: USER_ACCT pid=2824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:22.673470 sshd[2824]: Accepted publickey for core from 10.0.0.1 port 49716 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:14:22.675000 audit[2824]: CRED_ACQ pid=2824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:22.676724 sshd[2824]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:14:22.679141 kernel: audit: type=1101 audit(1696274062.672:1243): pid=2824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:22.679203 kernel: audit: type=1103 audit(1696274062.675:1244): pid=2824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:22.679230 kernel: audit: type=1006 audit(1696274062.675:1245): pid=2824 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:14:22.681577 kernel: audit: type=1300 audit(1696274062.675:1245): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeee252140 a2=3 a3=0 items=0 ppid=1 pid=2824 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.675000 audit[2824]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeee252140 a2=3 a3=0 items=0 ppid=1 pid=2824 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:22.681090 systemd-logind[1117]: New session 20 of user core. Oct 2 19:14:22.681755 systemd[1]: Started session-20.scope. Oct 2 19:14:22.675000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:22.684352 kernel: audit: type=1327 audit(1696274062.675:1245): proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:22.685000 audit[2824]: USER_START pid=2824 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:22.687000 audit[2826]: CRED_ACQ pid=2826 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:22.693320 kernel: audit: type=1105 audit(1696274062.685:1246): pid=2824 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:22.693478 kernel: audit: type=1103 audit(1696274062.687:1247): pid=2826 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:22.801007 sshd[2824]: pam_unix(sshd:session): session closed for user core Oct 2 19:14:22.801000 audit[2824]: USER_END pid=2824 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:22.803050 systemd[1]: sshd@19-10.0.0.65:22-10.0.0.1:49716.service: Deactivated successfully. Oct 2 19:14:22.803909 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:14:22.804701 systemd-logind[1117]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:14:22.801000 audit[2824]: CRED_DISP pid=2824 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:22.805386 systemd-logind[1117]: Removed session 20. Oct 2 19:14:22.807488 kernel: audit: type=1106 audit(1696274062.801:1248): pid=2824 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:22.807558 kernel: audit: type=1104 audit(1696274062.801:1249): pid=2824 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:22.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.65:22-10.0.0.1:49716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:24.720591 kubelet[2058]: I1002 19:14:24.720565 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:24.720591 kubelet[2058]: I1002 19:14:24.720595 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:14:24.721874 kubelet[2058]: I1002 19:14:24.721843 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:14:24.731821 kubelet[2058]: I1002 19:14:24.731770 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:24.732080 kubelet[2058]: I1002 19:14:24.731890 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:14:24.732080 kubelet[2058]: E1002 19:14:24.731920 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:14:24.732080 kubelet[2058]: E1002 19:14:24.731933 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:14:24.732080 kubelet[2058]: E1002 19:14:24.731944 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:14:24.732080 kubelet[2058]: E1002 19:14:24.731954 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:14:24.732080 kubelet[2058]: E1002 19:14:24.731964 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:14:24.732080 kubelet[2058]: E1002 19:14:24.731973 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:14:24.732080 kubelet[2058]: I1002 19:14:24.731984 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:14:25.447781 kubelet[2058]: E1002 19:14:25.447746 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:14:25.448112 kubelet[2058]: E1002 19:14:25.448098 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:14:26.486521 kubelet[2058]: E1002 19:14:26.486468 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:14:29.448258 kubelet[2058]: E1002 19:14:29.448218 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:14:31.487055 kubelet[2058]: E1002 19:14:31.487004 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:14:32.805909 systemd[1]: Started sshd@20-10.0.0.65:22-10.0.0.1:59144.service. Oct 2 19:14:32.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.65:22-10.0.0.1:59144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:32.807009 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:14:32.807066 kernel: audit: type=1130 audit(1696274072.805:1251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.65:22-10.0.0.1:59144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:32.842000 audit[2837]: USER_ACCT pid=2837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:32.843163 sshd[2837]: Accepted publickey for core from 10.0.0.1 port 59144 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:14:32.844000 audit[2837]: CRED_ACQ pid=2837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:32.845936 sshd[2837]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:14:32.847972 kernel: audit: type=1101 audit(1696274072.842:1252): pid=2837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:32.848019 kernel: audit: type=1103 audit(1696274072.844:1253): pid=2837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:32.848108 kernel: audit: type=1006 audit(1696274072.844:1254): pid=2837 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:14:32.849463 kernel: audit: type=1300 audit(1696274072.844:1254): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff61ebddc0 a2=3 a3=0 items=0 ppid=1 pid=2837 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:32.844000 audit[2837]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff61ebddc0 a2=3 a3=0 items=0 ppid=1 pid=2837 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:32.849258 systemd-logind[1117]: New session 21 of user core. Oct 2 19:14:32.849949 systemd[1]: Started session-21.scope. Oct 2 19:14:32.844000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:32.852811 kernel: audit: type=1327 audit(1696274072.844:1254): proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:32.852000 audit[2837]: USER_START pid=2837 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:32.853000 audit[2839]: CRED_ACQ pid=2839 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:32.858346 kernel: audit: type=1105 audit(1696274072.852:1255): pid=2837 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:32.858399 kernel: audit: type=1103 audit(1696274072.853:1256): pid=2839 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:32.955171 sshd[2837]: pam_unix(sshd:session): session closed for user core Oct 2 19:14:32.955000 audit[2837]: USER_END pid=2837 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:32.957591 systemd[1]: sshd@20-10.0.0.65:22-10.0.0.1:59144.service: Deactivated successfully. Oct 2 19:14:32.958457 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:14:32.959086 systemd-logind[1117]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:14:32.955000 audit[2837]: CRED_DISP pid=2837 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:32.960016 systemd-logind[1117]: Removed session 21. Oct 2 19:14:32.962649 kernel: audit: type=1106 audit(1696274072.955:1257): pid=2837 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:32.962701 kernel: audit: type=1104 audit(1696274072.955:1258): pid=2837 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:32.957000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.65:22-10.0.0.1:59144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:34.744548 kubelet[2058]: I1002 19:14:34.744507 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:34.744548 kubelet[2058]: I1002 19:14:34.744546 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:14:34.745746 kubelet[2058]: I1002 19:14:34.745718 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:14:34.754757 kubelet[2058]: I1002 19:14:34.754723 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:34.754983 kubelet[2058]: I1002 19:14:34.754819 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:14:34.754983 kubelet[2058]: E1002 19:14:34.754842 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:14:34.754983 kubelet[2058]: E1002 19:14:34.754852 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:14:34.754983 kubelet[2058]: E1002 19:14:34.754861 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:14:34.754983 kubelet[2058]: E1002 19:14:34.754869 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:14:34.754983 kubelet[2058]: E1002 19:14:34.754878 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:14:34.754983 kubelet[2058]: E1002 19:14:34.754887 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:14:34.754983 kubelet[2058]: I1002 19:14:34.754896 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:14:36.488261 kubelet[2058]: E1002 19:14:36.488237 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:14:39.448128 kubelet[2058]: E1002 19:14:39.448086 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:14:39.448473 kubelet[2058]: E1002 19:14:39.448296 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:14:40.448018 kubelet[2058]: E1002 19:14:40.447983 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:14:41.488994 kubelet[2058]: E1002 19:14:41.488965 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:14:42.958807 systemd[1]: Started sshd@21-10.0.0.65:22-10.0.0.1:33608.service. Oct 2 19:14:42.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.65:22-10.0.0.1:33608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:42.959862 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:14:42.959907 kernel: audit: type=1130 audit(1696274082.958:1260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.65:22-10.0.0.1:33608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:42.993000 audit[2850]: USER_ACCT pid=2850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:42.994331 sshd[2850]: Accepted publickey for core from 10.0.0.1 port 33608 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:14:42.996235 sshd[2850]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:14:42.995000 audit[2850]: CRED_ACQ pid=2850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:42.999806 kernel: audit: type=1101 audit(1696274082.993:1261): pid=2850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:42.999855 kernel: audit: type=1103 audit(1696274082.995:1262): pid=2850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:42.999738 systemd-logind[1117]: New session 22 of user core. Oct 2 19:14:43.000824 systemd[1]: Started session-22.scope. Oct 2 19:14:43.001817 kernel: audit: type=1006 audit(1696274082.995:1263): pid=2850 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:14:43.001860 kernel: audit: type=1300 audit(1696274082.995:1263): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3f74a290 a2=3 a3=0 items=0 ppid=1 pid=2850 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.995000 audit[2850]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3f74a290 a2=3 a3=0 items=0 ppid=1 pid=2850 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:42.995000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:43.006183 kernel: audit: type=1327 audit(1696274082.995:1263): proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:43.006224 kernel: audit: type=1105 audit(1696274083.004:1264): pid=2850 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:43.004000 audit[2850]: USER_START pid=2850 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:43.005000 audit[2852]: CRED_ACQ pid=2852 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:43.011744 kernel: audit: type=1103 audit(1696274083.005:1265): pid=2852 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:43.101772 sshd[2850]: pam_unix(sshd:session): session closed for user core Oct 2 19:14:43.101000 audit[2850]: USER_END pid=2850 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:43.103702 systemd[1]: sshd@21-10.0.0.65:22-10.0.0.1:33608.service: Deactivated successfully. Oct 2 19:14:43.104362 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:14:43.105075 systemd-logind[1117]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:14:43.101000 audit[2850]: CRED_DISP pid=2850 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:43.105718 systemd-logind[1117]: Removed session 22. Oct 2 19:14:43.107909 kernel: audit: type=1106 audit(1696274083.101:1266): pid=2850 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:43.107967 kernel: audit: type=1104 audit(1696274083.101:1267): pid=2850 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:43.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.65:22-10.0.0.1:33608 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:44.767638 kubelet[2058]: I1002 19:14:44.767609 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:44.767638 kubelet[2058]: I1002 19:14:44.767646 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:14:44.768973 kubelet[2058]: I1002 19:14:44.768951 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:14:44.777856 kubelet[2058]: I1002 19:14:44.777831 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:44.777980 kubelet[2058]: I1002 19:14:44.777931 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:14:44.777980 kubelet[2058]: E1002 19:14:44.777958 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:14:44.777980 kubelet[2058]: E1002 19:14:44.777971 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:14:44.778100 kubelet[2058]: E1002 19:14:44.777982 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:14:44.778100 kubelet[2058]: E1002 19:14:44.777995 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:14:44.778100 kubelet[2058]: E1002 19:14:44.778009 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:14:44.778100 kubelet[2058]: E1002 19:14:44.778022 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:14:44.778100 kubelet[2058]: I1002 19:14:44.778035 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:14:46.490360 kubelet[2058]: E1002 19:14:46.490319 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:14:51.448448 kubelet[2058]: E1002 19:14:51.448415 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:14:51.448448 kubelet[2058]: E1002 19:14:51.448444 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:14:51.448853 kubelet[2058]: E1002 19:14:51.448638 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:14:51.491001 kubelet[2058]: E1002 19:14:51.490972 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:14:53.106876 systemd[1]: Started sshd@22-10.0.0.65:22-10.0.0.1:37320.service. Oct 2 19:14:53.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.65:22-10.0.0.1:37320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:53.107961 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:14:53.108030 kernel: audit: type=1130 audit(1696274093.106:1269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.65:22-10.0.0.1:37320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:53.144000 audit[2865]: USER_ACCT pid=2865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:53.145990 sshd[2865]: Accepted publickey for core from 10.0.0.1 port 37320 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:14:53.148304 sshd[2865]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:14:53.147000 audit[2865]: CRED_ACQ pid=2865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:53.151719 kernel: audit: type=1101 audit(1696274093.144:1270): pid=2865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:53.151833 kernel: audit: type=1103 audit(1696274093.147:1271): pid=2865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:53.151861 kernel: audit: type=1006 audit(1696274093.147:1272): pid=2865 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:14:53.152509 systemd-logind[1117]: New session 23 of user core. Oct 2 19:14:53.153418 systemd[1]: Started session-23.scope. Oct 2 19:14:53.154284 kernel: audit: type=1300 audit(1696274093.147:1272): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1e178d50 a2=3 a3=0 items=0 ppid=1 pid=2865 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:53.147000 audit[2865]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1e178d50 a2=3 a3=0 items=0 ppid=1 pid=2865 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:53.147000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:53.158454 kernel: audit: type=1327 audit(1696274093.147:1272): proctitle=737368643A20636F7265205B707269765D Oct 2 19:14:53.158633 kernel: audit: type=1105 audit(1696274093.157:1273): pid=2865 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:53.157000 audit[2865]: USER_START pid=2865 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:53.157000 audit[2867]: CRED_ACQ pid=2867 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:53.164259 kernel: audit: type=1103 audit(1696274093.157:1274): pid=2867 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:53.263474 sshd[2865]: pam_unix(sshd:session): session closed for user core Oct 2 19:14:53.263000 audit[2865]: USER_END pid=2865 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:53.265892 systemd[1]: sshd@22-10.0.0.65:22-10.0.0.1:37320.service: Deactivated successfully. Oct 2 19:14:53.266708 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:14:53.267749 systemd-logind[1117]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:14:53.263000 audit[2865]: CRED_DISP pid=2865 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:53.268509 systemd-logind[1117]: Removed session 23. Oct 2 19:14:53.270407 kernel: audit: type=1106 audit(1696274093.263:1275): pid=2865 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:53.270457 kernel: audit: type=1104 audit(1696274093.263:1276): pid=2865 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:14:53.265000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.65:22-10.0.0.1:37320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:54.791075 kubelet[2058]: I1002 19:14:54.791040 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:54.791075 kubelet[2058]: I1002 19:14:54.791079 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:14:54.792431 kubelet[2058]: I1002 19:14:54.792417 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:14:54.802570 kubelet[2058]: I1002 19:14:54.802538 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:14:54.802720 kubelet[2058]: I1002 19:14:54.802621 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:14:54.802720 kubelet[2058]: E1002 19:14:54.802641 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:14:54.802720 kubelet[2058]: E1002 19:14:54.802653 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:14:54.802720 kubelet[2058]: E1002 19:14:54.802662 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:14:54.802720 kubelet[2058]: E1002 19:14:54.802669 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:14:54.802720 kubelet[2058]: E1002 19:14:54.802678 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:14:54.802720 kubelet[2058]: E1002 19:14:54.802687 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:14:54.802720 kubelet[2058]: I1002 19:14:54.802695 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:14:56.492414 kubelet[2058]: E1002 19:14:56.492375 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:14:57.383000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:57.383000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:57.383000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001bf7be0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:14:57.383000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00120df50 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:14:57.383000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:57.383000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:14:58.193000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:58.194347 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:14:58.194391 kernel: audit: type=1400 audit(1696274098.193:1280): avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:58.193000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0125b1da0 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:14:58.199690 kernel: audit: type=1300 audit(1696274098.193:1280): arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0125b1da0 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:14:58.199718 kernel: audit: type=1327 audit(1696274098.193:1280): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:14:58.193000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:14:58.193000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:58.204701 kernel: audit: type=1400 audit(1696274098.193:1281): avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:58.204750 kernel: audit: type=1300 audit(1696274098.193:1281): arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0126669f0 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:14:58.193000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0126669f0 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:14:58.207798 kernel: audit: type=1327 audit(1696274098.193:1281): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:14:58.193000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:14:58.193000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:58.212668 kernel: audit: type=1400 audit(1696274098.193:1282): avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:58.212712 kernel: audit: type=1300 audit(1696274098.193:1282): arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c0125198c0 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:14:58.193000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c0125198c0 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:14:58.215691 kernel: audit: type=1327 audit(1696274098.193:1282): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:14:58.193000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:14:58.193000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:58.221144 kernel: audit: type=1400 audit(1696274098.193:1283): avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:58.193000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0125664e0 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:14:58.193000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:14:58.193000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:58.193000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c012566510 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:14:58.193000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:14:58.193000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:14:58.193000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0122d7d20 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:14:58.193000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:15:01.065000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:01.065000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:01.065000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:01.065000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001bf7d40 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:15:01.065000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0026f1960 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:15:01.065000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c000f64720 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:15:01.065000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:01.065000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:01.065000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:01.065000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:01.065000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001bf7d60 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:15:01.065000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:01.493813 kubelet[2058]: E1002 19:15:01.493764 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:15:03.267102 systemd[1]: Started sshd@23-10.0.0.65:22-10.0.0.1:44662.service. Oct 2 19:15:03.268099 kernel: kauditd_printk_skb: 20 callbacks suppressed Oct 2 19:15:03.268134 kernel: audit: type=1130 audit(1696274103.266:1290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.65:22-10.0.0.1:44662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:03.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.65:22-10.0.0.1:44662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:03.303000 audit[2880]: USER_ACCT pid=2880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:03.304373 sshd[2880]: Accepted publickey for core from 10.0.0.1 port 44662 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:15:03.306850 kernel: audit: type=1101 audit(1696274103.303:1291): pid=2880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:03.306000 audit[2880]: CRED_ACQ pid=2880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:03.307311 sshd[2880]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:03.311121 kernel: audit: type=1103 audit(1696274103.306:1292): pid=2880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:03.311179 kernel: audit: type=1006 audit(1696274103.306:1293): pid=2880 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:15:03.311207 kernel: audit: type=1300 audit(1696274103.306:1293): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd2240e00 a2=3 a3=0 items=0 ppid=1 pid=2880 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:03.306000 audit[2880]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd2240e00 a2=3 a3=0 items=0 ppid=1 pid=2880 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:03.311378 systemd-logind[1117]: New session 24 of user core. Oct 2 19:15:03.312392 systemd[1]: Started session-24.scope. Oct 2 19:15:03.306000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:03.314799 kernel: audit: type=1327 audit(1696274103.306:1293): proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:03.316000 audit[2880]: USER_START pid=2880 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:03.316000 audit[2882]: CRED_ACQ pid=2882 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:03.322870 kernel: audit: type=1105 audit(1696274103.316:1294): pid=2880 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:03.322926 kernel: audit: type=1103 audit(1696274103.316:1295): pid=2882 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:03.427845 sshd[2880]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:03.427000 audit[2880]: USER_END pid=2880 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:03.430058 systemd[1]: sshd@23-10.0.0.65:22-10.0.0.1:44662.service: Deactivated successfully. Oct 2 19:15:03.430755 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:15:03.431270 systemd-logind[1117]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:15:03.431811 kernel: audit: type=1106 audit(1696274103.427:1296): pid=2880 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:03.431885 kernel: audit: type=1104 audit(1696274103.427:1297): pid=2880 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:03.427000 audit[2880]: CRED_DISP pid=2880 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:03.432125 systemd-logind[1117]: Removed session 24. Oct 2 19:15:03.427000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.65:22-10.0.0.1:44662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:04.447495 kubelet[2058]: E1002 19:15:04.447437 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:15:04.447912 kubelet[2058]: E1002 19:15:04.447689 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:15:04.813805 kubelet[2058]: I1002 19:15:04.813705 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:15:04.813805 kubelet[2058]: I1002 19:15:04.813730 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:15:04.814699 kubelet[2058]: I1002 19:15:04.814680 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:15:04.823029 kubelet[2058]: I1002 19:15:04.822999 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:15:04.823101 kubelet[2058]: I1002 19:15:04.823071 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:15:04.823101 kubelet[2058]: E1002 19:15:04.823093 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:15:04.823167 kubelet[2058]: E1002 19:15:04.823104 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:15:04.823167 kubelet[2058]: E1002 19:15:04.823114 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:15:04.823167 kubelet[2058]: E1002 19:15:04.823125 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:15:04.823167 kubelet[2058]: E1002 19:15:04.823133 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:15:04.823167 kubelet[2058]: E1002 19:15:04.823142 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:15:04.823167 kubelet[2058]: I1002 19:15:04.823151 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:15:06.494943 kubelet[2058]: E1002 19:15:06.494909 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:15:11.496108 kubelet[2058]: E1002 19:15:11.496074 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:15:13.436737 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:15:13.436875 kernel: audit: type=1130 audit(1696274113.432:1299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.65:22-10.0.0.1:44988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:13.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.65:22-10.0.0.1:44988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:13.432920 systemd[1]: Started sshd@24-10.0.0.65:22-10.0.0.1:44988.service. Oct 2 19:15:13.472000 audit[2893]: USER_ACCT pid=2893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:13.473388 sshd[2893]: Accepted publickey for core from 10.0.0.1 port 44988 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:15:13.475346 sshd[2893]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:13.474000 audit[2893]: CRED_ACQ pid=2893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:13.477364 kernel: audit: type=1101 audit(1696274113.472:1300): pid=2893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:13.477400 kernel: audit: type=1103 audit(1696274113.474:1301): pid=2893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:13.479314 systemd-logind[1117]: New session 25 of user core. Oct 2 19:15:13.480231 systemd[1]: Started session-25.scope. Oct 2 19:15:13.481181 kernel: audit: type=1006 audit(1696274113.474:1302): pid=2893 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:15:13.481229 kernel: audit: type=1300 audit(1696274113.474:1302): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd377136b0 a2=3 a3=0 items=0 ppid=1 pid=2893 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:13.474000 audit[2893]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd377136b0 a2=3 a3=0 items=0 ppid=1 pid=2893 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:13.474000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:13.484628 kernel: audit: type=1327 audit(1696274113.474:1302): proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:13.484675 kernel: audit: type=1105 audit(1696274113.483:1303): pid=2893 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:13.483000 audit[2893]: USER_START pid=2893 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:13.484000 audit[2895]: CRED_ACQ pid=2895 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:13.490142 kernel: audit: type=1103 audit(1696274113.484:1304): pid=2895 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:13.584491 sshd[2893]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:13.584000 audit[2893]: USER_END pid=2893 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:13.587097 systemd[1]: sshd@24-10.0.0.65:22-10.0.0.1:44988.service: Deactivated successfully. Oct 2 19:15:13.587776 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:15:13.588657 systemd-logind[1117]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:15:13.584000 audit[2893]: CRED_DISP pid=2893 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:13.589448 systemd-logind[1117]: Removed session 25. Oct 2 19:15:13.591553 kernel: audit: type=1106 audit(1696274113.584:1305): pid=2893 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:13.591593 kernel: audit: type=1104 audit(1696274113.584:1306): pid=2893 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:13.586000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.65:22-10.0.0.1:44988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:14.835601 kubelet[2058]: I1002 19:15:14.835562 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:15:14.835601 kubelet[2058]: I1002 19:15:14.835595 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:15:14.837122 kubelet[2058]: I1002 19:15:14.837107 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:15:14.846151 kubelet[2058]: I1002 19:15:14.846126 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:15:14.846229 kubelet[2058]: I1002 19:15:14.846218 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:15:14.846260 kubelet[2058]: E1002 19:15:14.846246 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:15:14.846282 kubelet[2058]: E1002 19:15:14.846263 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:15:14.846282 kubelet[2058]: E1002 19:15:14.846275 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:15:14.846326 kubelet[2058]: E1002 19:15:14.846287 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:15:14.846326 kubelet[2058]: E1002 19:15:14.846299 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:15:14.846326 kubelet[2058]: E1002 19:15:14.846310 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:15:14.846326 kubelet[2058]: I1002 19:15:14.846323 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:15:15.447773 kubelet[2058]: E1002 19:15:15.447740 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:15:15.447979 kubelet[2058]: E1002 19:15:15.447818 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:15:15.448066 kubelet[2058]: E1002 19:15:15.448047 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:15:16.497184 kubelet[2058]: E1002 19:15:16.497128 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:15:21.497773 kubelet[2058]: E1002 19:15:21.497739 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:15:23.588826 systemd[1]: Started sshd@25-10.0.0.65:22-10.0.0.1:33374.service. Oct 2 19:15:23.588000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.65:22-10.0.0.1:33374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:23.592402 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:15:23.592456 kernel: audit: type=1130 audit(1696274123.588:1308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.65:22-10.0.0.1:33374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:23.623000 audit[2909]: USER_ACCT pid=2909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:23.624669 sshd[2909]: Accepted publickey for core from 10.0.0.1 port 33374 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:15:23.626311 sshd[2909]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:23.625000 audit[2909]: CRED_ACQ pid=2909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:23.629596 kernel: audit: type=1101 audit(1696274123.623:1309): pid=2909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:23.629655 kernel: audit: type=1103 audit(1696274123.625:1310): pid=2909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:23.629696 kernel: audit: type=1006 audit(1696274123.625:1311): pid=2909 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:15:23.630399 systemd-logind[1117]: New session 26 of user core. Oct 2 19:15:23.631068 systemd[1]: Started session-26.scope. Oct 2 19:15:23.625000 audit[2909]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc395e6070 a2=3 a3=0 items=0 ppid=1 pid=2909 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:23.634017 kernel: audit: type=1300 audit(1696274123.625:1311): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc395e6070 a2=3 a3=0 items=0 ppid=1 pid=2909 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:23.634087 kernel: audit: type=1327 audit(1696274123.625:1311): proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:23.625000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:23.635000 audit[2909]: USER_START pid=2909 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:23.636000 audit[2911]: CRED_ACQ pid=2911 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:23.640964 kernel: audit: type=1105 audit(1696274123.635:1312): pid=2909 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:23.641058 kernel: audit: type=1103 audit(1696274123.636:1313): pid=2911 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:23.741696 sshd[2909]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:23.741000 audit[2909]: USER_END pid=2909 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:23.744328 systemd[1]: sshd@25-10.0.0.65:22-10.0.0.1:33374.service: Deactivated successfully. Oct 2 19:15:23.745129 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:15:23.741000 audit[2909]: CRED_DISP pid=2909 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:23.745721 systemd-logind[1117]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:15:23.746417 systemd-logind[1117]: Removed session 26. Oct 2 19:15:23.747903 kernel: audit: type=1106 audit(1696274123.741:1314): pid=2909 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:23.747975 kernel: audit: type=1104 audit(1696274123.741:1315): pid=2909 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:23.743000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.65:22-10.0.0.1:33374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:24.859053 kubelet[2058]: I1002 19:15:24.859022 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:15:24.859053 kubelet[2058]: I1002 19:15:24.859056 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:15:24.860147 kubelet[2058]: I1002 19:15:24.860107 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:15:24.869923 kubelet[2058]: I1002 19:15:24.869881 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:15:24.870105 kubelet[2058]: I1002 19:15:24.869973 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:15:24.870105 kubelet[2058]: E1002 19:15:24.869997 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:15:24.870105 kubelet[2058]: E1002 19:15:24.870017 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:15:24.870105 kubelet[2058]: E1002 19:15:24.870026 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:15:24.870105 kubelet[2058]: E1002 19:15:24.870035 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:15:24.870105 kubelet[2058]: E1002 19:15:24.870044 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:15:24.870105 kubelet[2058]: E1002 19:15:24.870052 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:15:24.870105 kubelet[2058]: I1002 19:15:24.870060 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:15:26.499357 kubelet[2058]: E1002 19:15:26.499324 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:15:27.447674 kubelet[2058]: E1002 19:15:27.447628 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:15:27.449835 env[1130]: time="2023-10-02T19:15:27.449766825Z" level=info msg="CreateContainer within sandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:15:28.196051 env[1130]: time="2023-10-02T19:15:28.195995213Z" level=info msg="CreateContainer within sandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c\"" Oct 2 19:15:28.196689 env[1130]: time="2023-10-02T19:15:28.196645366Z" level=info msg="StartContainer for \"e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c\"" Oct 2 19:15:28.211723 systemd[1]: Started cri-containerd-e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c.scope. Oct 2 19:15:28.218288 systemd[1]: cri-containerd-e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c.scope: Deactivated successfully. Oct 2 19:15:28.218610 systemd[1]: Stopped cri-containerd-e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c.scope. Oct 2 19:15:28.222104 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c-rootfs.mount: Deactivated successfully. Oct 2 19:15:28.229329 env[1130]: time="2023-10-02T19:15:28.229276120Z" level=info msg="shim disconnected" id=e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c Oct 2 19:15:28.229459 env[1130]: time="2023-10-02T19:15:28.229342858Z" level=warning msg="cleaning up after shim disconnected" id=e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c namespace=k8s.io Oct 2 19:15:28.229459 env[1130]: time="2023-10-02T19:15:28.229355823Z" level=info msg="cleaning up dead shim" Oct 2 19:15:28.237263 env[1130]: time="2023-10-02T19:15:28.237204628Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:15:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2944 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:15:28Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:15:28.237555 env[1130]: time="2023-10-02T19:15:28.237480546Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:15:28.237741 env[1130]: time="2023-10-02T19:15:28.237683935Z" level=error msg="Failed to pipe stdout of container \"e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c\"" error="reading from a closed fifo" Oct 2 19:15:28.237911 env[1130]: time="2023-10-02T19:15:28.237849622Z" level=error msg="Failed to pipe stderr of container \"e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c\"" error="reading from a closed fifo" Oct 2 19:15:28.240482 env[1130]: time="2023-10-02T19:15:28.240425707Z" level=error msg="StartContainer for \"e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:15:28.240703 kubelet[2058]: E1002 19:15:28.240681 2058 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c" Oct 2 19:15:28.241021 kubelet[2058]: E1002 19:15:28.240891 2058 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:15:28.241021 kubelet[2058]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:15:28.241021 kubelet[2058]: rm /hostbin/cilium-mount Oct 2 19:15:28.241021 kubelet[2058]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ncxcb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:15:28.241144 kubelet[2058]: E1002 19:15:28.240942 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:15:28.816736 kubelet[2058]: I1002 19:15:28.816707 2058 scope.go:115] "RemoveContainer" containerID="8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1" Oct 2 19:15:28.817056 kubelet[2058]: I1002 19:15:28.817037 2058 scope.go:115] "RemoveContainer" containerID="8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1" Oct 2 19:15:28.818572 env[1130]: time="2023-10-02T19:15:28.818447590Z" level=info msg="RemoveContainer for \"8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1\"" Oct 2 19:15:28.818931 env[1130]: time="2023-10-02T19:15:28.818739738Z" level=info msg="RemoveContainer for \"8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1\"" Oct 2 19:15:28.818931 env[1130]: time="2023-10-02T19:15:28.818844398Z" level=error msg="RemoveContainer for \"8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1\" failed" error="failed to set removing state for container \"8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1\": container is already in removing state" Oct 2 19:15:28.819524 kubelet[2058]: E1002 19:15:28.819507 2058 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1\": container is already in removing state" containerID="8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1" Oct 2 19:15:28.819594 kubelet[2058]: E1002 19:15:28.819536 2058 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1": container is already in removing state; Skipping pod "cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)" Oct 2 19:15:28.819623 kubelet[2058]: E1002 19:15:28.819602 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:15:28.819868 kubelet[2058]: E1002 19:15:28.819844 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:15:28.821682 env[1130]: time="2023-10-02T19:15:28.821636486Z" level=info msg="RemoveContainer for \"8745f5ecc864263284998a368cffe4bfe9eb64a66966bd2b28cbc9223bcd1bb1\" returns successfully" Oct 2 19:15:31.334140 kubelet[2058]: W1002 19:15:31.334104 2058 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc8aa2c19_3f4f_4c8a_9d81_e59135bc56e7.slice/cri-containerd-e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c.scope WatchSource:0}: task e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c not found: not found Oct 2 19:15:31.499875 kubelet[2058]: E1002 19:15:31.499849 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:15:33.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.65:22-10.0.0.1:58730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:33.746664 systemd[1]: Started sshd@26-10.0.0.65:22-10.0.0.1:58730.service. Oct 2 19:15:33.750366 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:15:33.750441 kernel: audit: type=1130 audit(1696274133.745:1317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.65:22-10.0.0.1:58730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:33.811000 audit[2957]: USER_ACCT pid=2957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:33.812776 sshd[2957]: Accepted publickey for core from 10.0.0.1 port 58730 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:15:33.815310 sshd[2957]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:33.814000 audit[2957]: CRED_ACQ pid=2957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:33.818342 kernel: audit: type=1101 audit(1696274133.811:1318): pid=2957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:33.818462 kernel: audit: type=1103 audit(1696274133.814:1319): pid=2957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:33.818492 kernel: audit: type=1006 audit(1696274133.814:1320): pid=2957 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:15:33.821116 kernel: audit: type=1300 audit(1696274133.814:1320): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff7f4e32c0 a2=3 a3=0 items=0 ppid=1 pid=2957 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:33.814000 audit[2957]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff7f4e32c0 a2=3 a3=0 items=0 ppid=1 pid=2957 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:33.819907 systemd-logind[1117]: New session 27 of user core. Oct 2 19:15:33.820958 systemd[1]: Started session-27.scope. Oct 2 19:15:33.823075 kernel: audit: type=1327 audit(1696274133.814:1320): proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:33.814000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:33.825000 audit[2957]: USER_START pid=2957 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:33.826000 audit[2959]: CRED_ACQ pid=2959 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:33.831081 kernel: audit: type=1105 audit(1696274133.825:1321): pid=2957 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:33.831167 kernel: audit: type=1103 audit(1696274133.826:1322): pid=2959 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:33.930941 sshd[2957]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:33.931000 audit[2957]: USER_END pid=2957 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:33.933473 systemd[1]: sshd@26-10.0.0.65:22-10.0.0.1:58730.service: Deactivated successfully. Oct 2 19:15:33.934319 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:15:33.931000 audit[2957]: CRED_DISP pid=2957 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:33.935363 systemd-logind[1117]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:15:33.935986 systemd-logind[1117]: Removed session 27. Oct 2 19:15:33.937047 kernel: audit: type=1106 audit(1696274133.931:1323): pid=2957 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:33.937087 kernel: audit: type=1104 audit(1696274133.931:1324): pid=2957 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:33.932000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.65:22-10.0.0.1:58730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:34.882250 kubelet[2058]: I1002 19:15:34.882176 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:15:34.882250 kubelet[2058]: I1002 19:15:34.882207 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:15:34.883396 kubelet[2058]: I1002 19:15:34.883362 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:15:34.891439 kubelet[2058]: I1002 19:15:34.891423 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:15:34.891502 kubelet[2058]: I1002 19:15:34.891480 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:15:34.891502 kubelet[2058]: E1002 19:15:34.891499 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:15:34.891557 kubelet[2058]: E1002 19:15:34.891509 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:15:34.891557 kubelet[2058]: E1002 19:15:34.891518 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:15:34.891557 kubelet[2058]: E1002 19:15:34.891526 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:15:34.891557 kubelet[2058]: E1002 19:15:34.891534 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:15:34.891557 kubelet[2058]: E1002 19:15:34.891543 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:15:34.891557 kubelet[2058]: I1002 19:15:34.891551 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:15:36.500884 kubelet[2058]: E1002 19:15:36.500850 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:15:40.448061 kubelet[2058]: E1002 19:15:40.448012 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:15:40.448376 kubelet[2058]: E1002 19:15:40.448298 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hcdth_kube-system(c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7)\"" pod="kube-system/cilium-hcdth" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 Oct 2 19:15:41.448685 kubelet[2058]: E1002 19:15:41.448650 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:15:41.501445 kubelet[2058]: E1002 19:15:41.501409 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:15:43.935293 systemd[1]: Started sshd@27-10.0.0.65:22-10.0.0.1:59200.service. Oct 2 19:15:43.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.65:22-10.0.0.1:59200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:43.936297 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:15:43.936349 kernel: audit: type=1130 audit(1696274143.933:1326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.65:22-10.0.0.1:59200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:43.968000 audit[2970]: USER_ACCT pid=2970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:43.970814 sshd[2970]: Accepted publickey for core from 10.0.0.1 port 59200 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:15:43.972431 sshd[2970]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:43.970000 audit[2970]: CRED_ACQ pid=2970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:43.976238 kernel: audit: type=1101 audit(1696274143.968:1327): pid=2970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:43.976286 kernel: audit: type=1103 audit(1696274143.970:1328): pid=2970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:43.976304 kernel: audit: type=1006 audit(1696274143.970:1329): pid=2970 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:15:43.977656 systemd[1]: Started session-28.scope. Oct 2 19:15:43.978257 kernel: audit: type=1300 audit(1696274143.970:1329): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd87f36b20 a2=3 a3=0 items=0 ppid=1 pid=2970 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:43.970000 audit[2970]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd87f36b20 a2=3 a3=0 items=0 ppid=1 pid=2970 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:43.977870 systemd-logind[1117]: New session 28 of user core. Oct 2 19:15:43.981028 kernel: audit: type=1327 audit(1696274143.970:1329): proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:43.970000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:43.981000 audit[2970]: USER_START pid=2970 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:43.982000 audit[2972]: CRED_ACQ pid=2972 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:43.988570 kernel: audit: type=1105 audit(1696274143.981:1330): pid=2970 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:43.988643 kernel: audit: type=1103 audit(1696274143.982:1331): pid=2972 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:44.079940 sshd[2970]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:44.079000 audit[2970]: USER_END pid=2970 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:44.082827 systemd[1]: sshd@27-10.0.0.65:22-10.0.0.1:59200.service: Deactivated successfully. Oct 2 19:15:44.083343 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:15:44.084040 systemd-logind[1117]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:15:44.079000 audit[2970]: CRED_DISP pid=2970 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:44.087062 kernel: audit: type=1106 audit(1696274144.079:1332): pid=2970 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:44.087144 kernel: audit: type=1104 audit(1696274144.079:1333): pid=2970 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:44.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.65:22-10.0.0.1:59200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:44.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.65:22-10.0.0.1:59216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:44.087371 systemd[1]: Started sshd@28-10.0.0.65:22-10.0.0.1:59216.service. Oct 2 19:15:44.088549 systemd-logind[1117]: Removed session 28. Oct 2 19:15:44.121000 audit[2985]: USER_ACCT pid=2985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:44.123403 sshd[2985]: Accepted publickey for core from 10.0.0.1 port 59216 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:15:44.122000 audit[2985]: CRED_ACQ pid=2985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:44.122000 audit[2985]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca8b0b460 a2=3 a3=0 items=0 ppid=1 pid=2985 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:44.122000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:44.124721 sshd[2985]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:44.128238 systemd-logind[1117]: New session 29 of user core. Oct 2 19:15:44.129090 systemd[1]: Started session-29.scope. Oct 2 19:15:44.131000 audit[2985]: USER_START pid=2985 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:44.132000 audit[2988]: CRED_ACQ pid=2988 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:44.902531 kubelet[2058]: I1002 19:15:44.902495 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:15:44.902531 kubelet[2058]: I1002 19:15:44.902528 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:15:44.903546 kubelet[2058]: I1002 19:15:44.903534 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:15:44.911332 kubelet[2058]: I1002 19:15:44.911302 2058 eviction_manager.go:356] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage" Oct 2 19:15:44.911438 kubelet[2058]: I1002 19:15:44.911406 2058 eviction_manager.go:374] "Eviction manager: pods ranked for eviction" pods="[kube-system/cilium-hcdth kube-system/kube-controller-manager-localhost kube-system/kube-apiserver-localhost kube-system/kube-scheduler-localhost kube-system/cilium-operator-f59cbd8c6-jtccm kube-system/kube-proxy-nt745]" Oct 2 19:15:44.911438 kubelet[2058]: E1002 19:15:44.911435 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-hcdth" Oct 2 19:15:44.911515 kubelet[2058]: E1002 19:15:44.911450 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-controller-manager-localhost" Oct 2 19:15:44.911515 kubelet[2058]: E1002 19:15:44.911463 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-apiserver-localhost" Oct 2 19:15:44.911515 kubelet[2058]: E1002 19:15:44.911475 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-scheduler-localhost" Oct 2 19:15:44.911515 kubelet[2058]: E1002 19:15:44.911486 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/cilium-operator-f59cbd8c6-jtccm" Oct 2 19:15:44.911515 kubelet[2058]: E1002 19:15:44.911497 2058 eviction_manager.go:577] "Eviction manager: cannot evict a critical pod" pod="kube-system/kube-proxy-nt745" Oct 2 19:15:44.911515 kubelet[2058]: I1002 19:15:44.911510 2058 eviction_manager.go:406] "Eviction manager: unable to evict any pods from the node" Oct 2 19:15:45.677523 env[1130]: time="2023-10-02T19:15:45.677457894Z" level=info msg="StopPodSandbox for \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\"" Oct 2 19:15:45.677944 env[1130]: time="2023-10-02T19:15:45.677545030Z" level=info msg="Container to stop \"e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:15:45.679014 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d-shm.mount: Deactivated successfully. Oct 2 19:15:45.686100 env[1130]: time="2023-10-02T19:15:45.686031547Z" level=info msg="StopContainer for \"507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3\" with timeout 30 (s)" Oct 2 19:15:45.686536 env[1130]: time="2023-10-02T19:15:45.686511241Z" level=info msg="Stop container \"507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3\" with signal terminated" Oct 2 19:15:45.685000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:15:45.687010 systemd[1]: cri-containerd-4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d.scope: Deactivated successfully. Oct 2 19:15:45.690000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:15:45.698750 systemd[1]: cri-containerd-507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3.scope: Deactivated successfully. Oct 2 19:15:45.697000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:15:45.702000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:15:45.714475 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d-rootfs.mount: Deactivated successfully. Oct 2 19:15:45.718499 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3-rootfs.mount: Deactivated successfully. Oct 2 19:15:45.719330 env[1130]: time="2023-10-02T19:15:45.719275756Z" level=info msg="shim disconnected" id=4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d Oct 2 19:15:45.719412 env[1130]: time="2023-10-02T19:15:45.719337433Z" level=warning msg="cleaning up after shim disconnected" id=4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d namespace=k8s.io Oct 2 19:15:45.719412 env[1130]: time="2023-10-02T19:15:45.719353273Z" level=info msg="cleaning up dead shim" Oct 2 19:15:45.720676 env[1130]: time="2023-10-02T19:15:45.720629947Z" level=info msg="shim disconnected" id=507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3 Oct 2 19:15:45.720753 env[1130]: time="2023-10-02T19:15:45.720682437Z" level=warning msg="cleaning up after shim disconnected" id=507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3 namespace=k8s.io Oct 2 19:15:45.720753 env[1130]: time="2023-10-02T19:15:45.720697636Z" level=info msg="cleaning up dead shim" Oct 2 19:15:45.727385 env[1130]: time="2023-10-02T19:15:45.727322073Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:15:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3033 runtime=io.containerd.runc.v2\n" Oct 2 19:15:45.727729 env[1130]: time="2023-10-02T19:15:45.727701266Z" level=info msg="TearDown network for sandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" successfully" Oct 2 19:15:45.727729 env[1130]: time="2023-10-02T19:15:45.727729099Z" level=info msg="StopPodSandbox for \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" returns successfully" Oct 2 19:15:45.730927 env[1130]: time="2023-10-02T19:15:45.730889994Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:15:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3037 runtime=io.containerd.runc.v2\n" Oct 2 19:15:45.733330 env[1130]: time="2023-10-02T19:15:45.733296762Z" level=info msg="StopContainer for \"507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3\" returns successfully" Oct 2 19:15:45.733677 env[1130]: time="2023-10-02T19:15:45.733641479Z" level=info msg="StopPodSandbox for \"0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8\"" Oct 2 19:15:45.733895 env[1130]: time="2023-10-02T19:15:45.733696774Z" level=info msg="Container to stop \"507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:15:45.734944 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8-shm.mount: Deactivated successfully. Oct 2 19:15:45.741461 systemd[1]: cri-containerd-0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8.scope: Deactivated successfully. Oct 2 19:15:45.739000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:15:45.746000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:15:45.756318 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8-rootfs.mount: Deactivated successfully. Oct 2 19:15:45.770406 env[1130]: time="2023-10-02T19:15:45.770346515Z" level=info msg="shim disconnected" id=0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8 Oct 2 19:15:45.770564 env[1130]: time="2023-10-02T19:15:45.770409405Z" level=warning msg="cleaning up after shim disconnected" id=0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8 namespace=k8s.io Oct 2 19:15:45.770564 env[1130]: time="2023-10-02T19:15:45.770423512Z" level=info msg="cleaning up dead shim" Oct 2 19:15:45.778272 env[1130]: time="2023-10-02T19:15:45.778229562Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:15:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3076 runtime=io.containerd.runc.v2\n" Oct 2 19:15:45.778505 env[1130]: time="2023-10-02T19:15:45.778480270Z" level=info msg="TearDown network for sandbox \"0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8\" successfully" Oct 2 19:15:45.778505 env[1130]: time="2023-10-02T19:15:45.778503263Z" level=info msg="StopPodSandbox for \"0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8\" returns successfully" Oct 2 19:15:45.784721 kubelet[2058]: I1002 19:15:45.784691 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-host-proc-sys-net\") pod \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " Oct 2 19:15:45.784874 kubelet[2058]: I1002 19:15:45.784727 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-hostproc\") pod \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " Oct 2 19:15:45.784874 kubelet[2058]: I1002 19:15:45.784756 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/13645d17-ddbe-4bc8-a605-0eb5d6812cc8-cilium-config-path\") pod \"13645d17-ddbe-4bc8-a605-0eb5d6812cc8\" (UID: \"13645d17-ddbe-4bc8-a605-0eb5d6812cc8\") " Oct 2 19:15:45.784874 kubelet[2058]: I1002 19:15:45.784782 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-hostproc" (OuterVolumeSpecName: "hostproc") pod "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" (UID: "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:15:45.784874 kubelet[2058]: I1002 19:15:45.784781 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" (UID: "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:15:45.784874 kubelet[2058]: I1002 19:15:45.784782 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-etc-cni-netd\") pod \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " Oct 2 19:15:45.785018 kubelet[2058]: I1002 19:15:45.784814 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" (UID: "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:15:45.785018 kubelet[2058]: I1002 19:15:45.784836 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-xtables-lock\") pod \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " Oct 2 19:15:45.785018 kubelet[2058]: I1002 19:15:45.784853 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-cilium-cgroup\") pod \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " Oct 2 19:15:45.785018 kubelet[2058]: I1002 19:15:45.784871 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-lib-modules\") pod \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " Oct 2 19:15:45.785018 kubelet[2058]: I1002 19:15:45.784890 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-cilium-config-path\") pod \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " Oct 2 19:15:45.785018 kubelet[2058]: I1002 19:15:45.784909 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-5b82l\" (UniqueName: \"kubernetes.io/projected/13645d17-ddbe-4bc8-a605-0eb5d6812cc8-kube-api-access-5b82l\") pod \"13645d17-ddbe-4bc8-a605-0eb5d6812cc8\" (UID: \"13645d17-ddbe-4bc8-a605-0eb5d6812cc8\") " Oct 2 19:15:45.785155 kubelet[2058]: I1002 19:15:45.784909 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" (UID: "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:15:45.785155 kubelet[2058]: I1002 19:15:45.784927 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-host-proc-sys-kernel\") pod \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " Oct 2 19:15:45.785155 kubelet[2058]: I1002 19:15:45.784932 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" (UID: "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:15:45.785155 kubelet[2058]: I1002 19:15:45.784944 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-cni-path\") pod \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " Oct 2 19:15:45.785155 kubelet[2058]: I1002 19:15:45.784959 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-cilium-run\") pod \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " Oct 2 19:15:45.785272 kubelet[2058]: I1002 19:15:45.784977 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-ncxcb\" (UniqueName: \"kubernetes.io/projected/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-kube-api-access-ncxcb\") pod \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " Oct 2 19:15:45.785272 kubelet[2058]: I1002 19:15:45.784991 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-bpf-maps\") pod \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " Oct 2 19:15:45.785272 kubelet[2058]: W1002 19:15:45.784982 2058 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/13645d17-ddbe-4bc8-a605-0eb5d6812cc8/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:15:45.785272 kubelet[2058]: W1002 19:15:45.785051 2058 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:15:45.785898 kubelet[2058]: I1002 19:15:45.785423 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-cni-path" (OuterVolumeSpecName: "cni-path") pod "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" (UID: "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:15:45.785898 kubelet[2058]: I1002 19:15:45.785715 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" (UID: "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:15:45.785972 kubelet[2058]: I1002 19:15:45.785945 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" (UID: "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:15:45.787707 kubelet[2058]: I1002 19:15:45.786049 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" (UID: "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:15:45.787707 kubelet[2058]: I1002 19:15:45.786077 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" (UID: "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:15:45.787707 kubelet[2058]: I1002 19:15:45.785008 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-hubble-tls\") pod \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " Oct 2 19:15:45.787707 kubelet[2058]: I1002 19:15:45.786117 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-clustermesh-secrets\") pod \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\" (UID: \"c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7\") " Oct 2 19:15:45.787707 kubelet[2058]: I1002 19:15:45.786149 2058 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:15:45.787707 kubelet[2058]: I1002 19:15:45.786159 2058 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:15:45.787895 kubelet[2058]: I1002 19:15:45.786169 2058 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:15:45.787895 kubelet[2058]: I1002 19:15:45.786177 2058 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:15:45.787895 kubelet[2058]: I1002 19:15:45.786185 2058 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:15:45.787895 kubelet[2058]: I1002 19:15:45.786192 2058 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:15:45.787895 kubelet[2058]: I1002 19:15:45.786200 2058 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:15:45.787895 kubelet[2058]: I1002 19:15:45.786208 2058 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:15:45.787895 kubelet[2058]: I1002 19:15:45.786216 2058 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:15:45.787895 kubelet[2058]: I1002 19:15:45.786224 2058 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:15:45.788175 kubelet[2058]: I1002 19:15:45.787474 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" (UID: "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:15:45.788175 kubelet[2058]: I1002 19:15:45.787648 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/13645d17-ddbe-4bc8-a605-0eb5d6812cc8-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "13645d17-ddbe-4bc8-a605-0eb5d6812cc8" (UID: "13645d17-ddbe-4bc8-a605-0eb5d6812cc8"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:15:45.788370 kubelet[2058]: I1002 19:15:45.788345 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" (UID: "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:15:45.789618 kubelet[2058]: I1002 19:15:45.789577 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/13645d17-ddbe-4bc8-a605-0eb5d6812cc8-kube-api-access-5b82l" (OuterVolumeSpecName: "kube-api-access-5b82l") pod "13645d17-ddbe-4bc8-a605-0eb5d6812cc8" (UID: "13645d17-ddbe-4bc8-a605-0eb5d6812cc8"). InnerVolumeSpecName "kube-api-access-5b82l". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:15:45.789853 kubelet[2058]: I1002 19:15:45.789829 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" (UID: "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:15:45.789853 kubelet[2058]: I1002 19:15:45.789845 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-kube-api-access-ncxcb" (OuterVolumeSpecName: "kube-api-access-ncxcb") pod "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" (UID: "c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7"). InnerVolumeSpecName "kube-api-access-ncxcb". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:15:45.843895 kubelet[2058]: I1002 19:15:45.843868 2058 scope.go:115] "RemoveContainer" containerID="507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3" Oct 2 19:15:45.846686 env[1130]: time="2023-10-02T19:15:45.846655964Z" level=info msg="RemoveContainer for \"507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3\"" Oct 2 19:15:45.847102 systemd[1]: Removed slice kubepods-besteffort-pod13645d17_ddbe_4bc8_a605_0eb5d6812cc8.slice. Oct 2 19:15:45.849940 systemd[1]: Removed slice kubepods-burstable-podc8aa2c19_3f4f_4c8a_9d81_e59135bc56e7.slice. Oct 2 19:15:45.852572 env[1130]: time="2023-10-02T19:15:45.852534509Z" level=info msg="RemoveContainer for \"507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3\" returns successfully" Oct 2 19:15:45.852750 kubelet[2058]: I1002 19:15:45.852724 2058 scope.go:115] "RemoveContainer" containerID="507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3" Oct 2 19:15:45.853033 env[1130]: time="2023-10-02T19:15:45.852966943Z" level=error msg="ContainerStatus for \"507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3\": not found" Oct 2 19:15:45.853113 kubelet[2058]: E1002 19:15:45.853098 2058 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3\": not found" containerID="507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3" Oct 2 19:15:45.853144 kubelet[2058]: I1002 19:15:45.853133 2058 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3} err="failed to get container status \"507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3\": rpc error: code = NotFound desc = an error occurred when try to find container \"507046efb39fed4af48c28ec2a32adb9e6cf0d6f52140cf598f0fc847d8455e3\": not found" Oct 2 19:15:45.853144 kubelet[2058]: I1002 19:15:45.853144 2058 scope.go:115] "RemoveContainer" containerID="e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c" Oct 2 19:15:45.855275 env[1130]: time="2023-10-02T19:15:45.854838741Z" level=info msg="RemoveContainer for \"e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c\"" Oct 2 19:15:45.859216 env[1130]: time="2023-10-02T19:15:45.859156482Z" level=info msg="RemoveContainer for \"e5418034c19d38ac3cd4484c4cebc415d39395a83df06f2044e24345827f521c\" returns successfully" Oct 2 19:15:45.886947 kubelet[2058]: I1002 19:15:45.886907 2058 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-ncxcb\" (UniqueName: \"kubernetes.io/projected/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-kube-api-access-ncxcb\") on node \"localhost\" DevicePath \"\"" Oct 2 19:15:45.886947 kubelet[2058]: I1002 19:15:45.886934 2058 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:15:45.886947 kubelet[2058]: I1002 19:15:45.886945 2058 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:15:45.886947 kubelet[2058]: I1002 19:15:45.886955 2058 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/13645d17-ddbe-4bc8-a605-0eb5d6812cc8-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:15:45.887167 kubelet[2058]: I1002 19:15:45.886964 2058 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:15:45.887167 kubelet[2058]: I1002 19:15:45.886972 2058 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-5b82l\" (UniqueName: \"kubernetes.io/projected/13645d17-ddbe-4bc8-a605-0eb5d6812cc8-kube-api-access-5b82l\") on node \"localhost\" DevicePath \"\"" Oct 2 19:15:46.502806 kubelet[2058]: E1002 19:15:46.502751 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:15:46.678859 systemd[1]: var-lib-kubelet-pods-13645d17\x2dddbe\x2d4bc8\x2da605\x2d0eb5d6812cc8-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d5b82l.mount: Deactivated successfully. Oct 2 19:15:46.678954 systemd[1]: var-lib-kubelet-pods-c8aa2c19\x2d3f4f\x2d4c8a\x2d9d81\x2de59135bc56e7-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dncxcb.mount: Deactivated successfully. Oct 2 19:15:46.679015 systemd[1]: var-lib-kubelet-pods-c8aa2c19\x2d3f4f\x2d4c8a\x2d9d81\x2de59135bc56e7-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:15:46.679081 systemd[1]: var-lib-kubelet-pods-c8aa2c19\x2d3f4f\x2d4c8a\x2d9d81\x2de59135bc56e7-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:15:47.450125 kubelet[2058]: I1002 19:15:47.450091 2058 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=13645d17-ddbe-4bc8-a605-0eb5d6812cc8 path="/var/lib/kubelet/pods/13645d17-ddbe-4bc8-a605-0eb5d6812cc8/volumes" Oct 2 19:15:47.450543 kubelet[2058]: I1002 19:15:47.450520 2058 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7 path="/var/lib/kubelet/pods/c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7/volumes" Oct 2 19:15:47.654112 sshd[2985]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:47.653000 audit[2985]: USER_END pid=2985 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:47.653000 audit[2985]: CRED_DISP pid=2985 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:47.656944 systemd[1]: sshd@28-10.0.0.65:22-10.0.0.1:59216.service: Deactivated successfully. Oct 2 19:15:47.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.65:22-10.0.0.1:59216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:47.657567 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:15:47.658132 systemd-logind[1117]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:15:47.659331 systemd[1]: Started sshd@29-10.0.0.65:22-10.0.0.1:59226.service. Oct 2 19:15:47.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.65:22-10.0.0.1:59226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:47.660187 systemd-logind[1117]: Removed session 29. Oct 2 19:15:47.694000 audit[3097]: USER_ACCT pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:47.696776 sshd[3097]: Accepted publickey for core from 10.0.0.1 port 59226 ssh2: RSA SHA256:9/VFs6Vh3tGO5nFEXFlJ5Qu3Hg4nXNY9KvFKo+bazB4 Oct 2 19:15:47.695000 audit[3097]: CRED_ACQ pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:47.695000 audit[3097]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff558d7390 a2=3 a3=0 items=0 ppid=1 pid=3097 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:47.695000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:47.697619 sshd[3097]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:47.700838 systemd-logind[1117]: New session 30 of user core. Oct 2 19:15:47.701620 systemd[1]: Started session-30.scope. Oct 2 19:15:47.704000 audit[3097]: USER_START pid=3097 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:47.705000 audit[3099]: CRED_ACQ pid=3099 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:15:48.106945 kubelet[2058]: I1002 19:15:48.106832 2058 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:15:48.106945 kubelet[2058]: E1002 19:15:48.106890 2058 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" containerName="mount-cgroup" Oct 2 19:15:48.106945 kubelet[2058]: E1002 19:15:48.106899 2058 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="13645d17-ddbe-4bc8-a605-0eb5d6812cc8" containerName="cilium-operator" Oct 2 19:15:48.106945 kubelet[2058]: E1002 19:15:48.106905 2058 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" containerName="mount-cgroup" Oct 2 19:15:48.106945 kubelet[2058]: E1002 19:15:48.106912 2058 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" containerName="mount-cgroup" Oct 2 19:15:48.106945 kubelet[2058]: E1002 19:15:48.106919 2058 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" containerName="mount-cgroup" Oct 2 19:15:48.106945 kubelet[2058]: E1002 19:15:48.106926 2058 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" containerName="mount-cgroup" Oct 2 19:15:48.106945 kubelet[2058]: I1002 19:15:48.106948 2058 memory_manager.go:346] "RemoveStaleState removing state" podUID="c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" containerName="mount-cgroup" Oct 2 19:15:48.107470 kubelet[2058]: I1002 19:15:48.106957 2058 memory_manager.go:346] "RemoveStaleState removing state" podUID="c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" containerName="mount-cgroup" Oct 2 19:15:48.107470 kubelet[2058]: I1002 19:15:48.106965 2058 memory_manager.go:346] "RemoveStaleState removing state" podUID="13645d17-ddbe-4bc8-a605-0eb5d6812cc8" containerName="cilium-operator" Oct 2 19:15:48.107470 kubelet[2058]: I1002 19:15:48.106982 2058 memory_manager.go:346] "RemoveStaleState removing state" podUID="c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" containerName="mount-cgroup" Oct 2 19:15:48.107470 kubelet[2058]: I1002 19:15:48.106989 2058 memory_manager.go:346] "RemoveStaleState removing state" podUID="c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" containerName="mount-cgroup" Oct 2 19:15:48.107470 kubelet[2058]: I1002 19:15:48.106995 2058 memory_manager.go:346] "RemoveStaleState removing state" podUID="c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" containerName="mount-cgroup" Oct 2 19:15:48.107470 kubelet[2058]: E1002 19:15:48.107011 2058 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" containerName="mount-cgroup" Oct 2 19:15:48.107470 kubelet[2058]: I1002 19:15:48.107029 2058 memory_manager.go:346] "RemoveStaleState removing state" podUID="c8aa2c19-3f4f-4c8a-9d81-e59135bc56e7" containerName="mount-cgroup" Oct 2 19:15:48.113352 systemd[1]: Created slice kubepods-burstable-pod4015b2ed_ff4e_458f_b850_1891b77ea435.slice. Oct 2 19:15:48.200299 kubelet[2058]: I1002 19:15:48.200255 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4015b2ed-ff4e-458f-b850-1891b77ea435-cilium-config-path\") pod \"cilium-g2fss\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " pod="kube-system/cilium-g2fss" Oct 2 19:15:48.200299 kubelet[2058]: I1002 19:15:48.200297 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-lib-modules\") pod \"cilium-g2fss\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " pod="kube-system/cilium-g2fss" Oct 2 19:15:48.200299 kubelet[2058]: I1002 19:15:48.200315 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-29862\" (UniqueName: \"kubernetes.io/projected/4015b2ed-ff4e-458f-b850-1891b77ea435-kube-api-access-29862\") pod \"cilium-g2fss\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " pod="kube-system/cilium-g2fss" Oct 2 19:15:48.200558 kubelet[2058]: I1002 19:15:48.200331 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-cilium-run\") pod \"cilium-g2fss\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " pod="kube-system/cilium-g2fss" Oct 2 19:15:48.200558 kubelet[2058]: I1002 19:15:48.200353 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-etc-cni-netd\") pod \"cilium-g2fss\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " pod="kube-system/cilium-g2fss" Oct 2 19:15:48.200558 kubelet[2058]: I1002 19:15:48.200430 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-cni-path\") pod \"cilium-g2fss\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " pod="kube-system/cilium-g2fss" Oct 2 19:15:48.200558 kubelet[2058]: I1002 19:15:48.200476 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/4015b2ed-ff4e-458f-b850-1891b77ea435-clustermesh-secrets\") pod \"cilium-g2fss\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " pod="kube-system/cilium-g2fss" Oct 2 19:15:48.200689 kubelet[2058]: I1002 19:15:48.200558 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-host-proc-sys-kernel\") pod \"cilium-g2fss\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " pod="kube-system/cilium-g2fss" Oct 2 19:15:48.200689 kubelet[2058]: I1002 19:15:48.200616 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-host-proc-sys-net\") pod \"cilium-g2fss\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " pod="kube-system/cilium-g2fss" Oct 2 19:15:48.200689 kubelet[2058]: I1002 19:15:48.200640 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/4015b2ed-ff4e-458f-b850-1891b77ea435-hubble-tls\") pod \"cilium-g2fss\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " pod="kube-system/cilium-g2fss" Oct 2 19:15:48.200689 kubelet[2058]: I1002 19:15:48.200666 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/4015b2ed-ff4e-458f-b850-1891b77ea435-cilium-ipsec-secrets\") pod \"cilium-g2fss\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " pod="kube-system/cilium-g2fss" Oct 2 19:15:48.200848 kubelet[2058]: I1002 19:15:48.200702 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-bpf-maps\") pod \"cilium-g2fss\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " pod="kube-system/cilium-g2fss" Oct 2 19:15:48.200848 kubelet[2058]: I1002 19:15:48.200726 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-hostproc\") pod \"cilium-g2fss\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " pod="kube-system/cilium-g2fss" Oct 2 19:15:48.200848 kubelet[2058]: I1002 19:15:48.200752 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-cilium-cgroup\") pod \"cilium-g2fss\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " pod="kube-system/cilium-g2fss" Oct 2 19:15:48.200848 kubelet[2058]: I1002 19:15:48.200772 2058 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-xtables-lock\") pod \"cilium-g2fss\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " pod="kube-system/cilium-g2fss" Oct 2 19:15:48.416196 kubelet[2058]: E1002 19:15:48.416148 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:15:48.416747 env[1130]: time="2023-10-02T19:15:48.416679844Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-g2fss,Uid:4015b2ed-ff4e-458f-b850-1891b77ea435,Namespace:kube-system,Attempt:0,}" Oct 2 19:15:48.991530 env[1130]: time="2023-10-02T19:15:48.991447699Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:15:48.993129 env[1130]: time="2023-10-02T19:15:48.993075399Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:15:48.994597 env[1130]: time="2023-10-02T19:15:48.994572462Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:15:48.996402 env[1130]: time="2023-10-02T19:15:48.996336894Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:15:49.010070 env[1130]: time="2023-10-02T19:15:49.010013200Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:15:49.010070 env[1130]: time="2023-10-02T19:15:49.010048206Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:15:49.010070 env[1130]: time="2023-10-02T19:15:49.010057394Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:15:49.010313 env[1130]: time="2023-10-02T19:15:49.010232637Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a pid=3119 runtime=io.containerd.runc.v2 Oct 2 19:15:49.023447 systemd[1]: Started cri-containerd-d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a.scope. Oct 2 19:15:49.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.035316 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 19:15:49.035368 kernel: audit: type=1400 audit(1696274149.033:1356): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.040363 kernel: audit: type=1400 audit(1696274149.033:1357): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.040421 kernel: audit: type=1400 audit(1696274149.033:1358): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.045613 kernel: audit: type=1400 audit(1696274149.033:1359): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.045657 kernel: audit: type=1400 audit(1696274149.033:1360): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.050765 kernel: audit: type=1400 audit(1696274149.033:1361): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.050845 kernel: audit: type=1400 audit(1696274149.033:1362): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.053270 kernel: audit: type=1400 audit(1696274149.033:1363): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.058159 kernel: audit: type=1400 audit(1696274149.033:1364): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.058197 kernel: audit: type=1400 audit(1696274149.034:1365): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.034000 audit: BPF prog-id=131 op=LOAD Oct 2 19:15:49.034000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.034000 audit[3128]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3119 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:49.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431353337343562613936613731343831663364373737323435353762 Oct 2 19:15:49.034000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.034000 audit[3128]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3119 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:49.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431353337343562613936613731343831663364373737323435353762 Oct 2 19:15:49.035000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.035000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.035000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.035000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.035000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.035000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.035000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.035000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.035000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.035000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.035000 audit: BPF prog-id=132 op=LOAD Oct 2 19:15:49.035000 audit[3128]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000210b30 items=0 ppid=3119 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:49.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431353337343562613936613731343831663364373737323435353762 Oct 2 19:15:49.037000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.037000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.037000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.037000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.037000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.037000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.037000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.037000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.037000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.037000 audit: BPF prog-id=133 op=LOAD Oct 2 19:15:49.037000 audit[3128]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000210b78 items=0 ppid=3119 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:49.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431353337343562613936613731343831663364373737323435353762 Oct 2 19:15:49.042000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:15:49.042000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:15:49.042000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.042000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.042000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.042000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.042000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.042000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.042000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.042000 audit[3128]: AVC avc: denied { perfmon } for pid=3128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.042000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.042000 audit[3128]: AVC avc: denied { bpf } for pid=3128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:49.042000 audit: BPF prog-id=134 op=LOAD Oct 2 19:15:49.042000 audit[3128]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000210f88 items=0 ppid=3119 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:49.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431353337343562613936613731343831663364373737323435353762 Oct 2 19:15:49.068613 env[1130]: time="2023-10-02T19:15:49.068570503Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-g2fss,Uid:4015b2ed-ff4e-458f-b850-1891b77ea435,Namespace:kube-system,Attempt:0,} returns sandbox id \"d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a\"" Oct 2 19:15:49.069181 kubelet[2058]: E1002 19:15:49.069163 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:15:49.071145 env[1130]: time="2023-10-02T19:15:49.071101455Z" level=info msg="CreateContainer within sandbox \"d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:15:49.081928 env[1130]: time="2023-10-02T19:15:49.081849440Z" level=info msg="CreateContainer within sandbox \"d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79\"" Oct 2 19:15:49.082323 env[1130]: time="2023-10-02T19:15:49.082296432Z" level=info msg="StartContainer for \"7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79\"" Oct 2 19:15:49.095475 systemd[1]: Started cri-containerd-7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79.scope. Oct 2 19:15:49.105796 systemd[1]: cri-containerd-7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79.scope: Deactivated successfully. Oct 2 19:15:49.106029 systemd[1]: Stopped cri-containerd-7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79.scope. Oct 2 19:15:49.122248 env[1130]: time="2023-10-02T19:15:49.122194480Z" level=info msg="shim disconnected" id=7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79 Oct 2 19:15:49.122524 env[1130]: time="2023-10-02T19:15:49.122478911Z" level=warning msg="cleaning up after shim disconnected" id=7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79 namespace=k8s.io Oct 2 19:15:49.122524 env[1130]: time="2023-10-02T19:15:49.122499200Z" level=info msg="cleaning up dead shim" Oct 2 19:15:49.128838 env[1130]: time="2023-10-02T19:15:49.128763213Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:15:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3177 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:15:49Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:15:49.129164 env[1130]: time="2023-10-02T19:15:49.129099403Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 19:15:49.129884 env[1130]: time="2023-10-02T19:15:49.129841156Z" level=error msg="Failed to pipe stderr of container \"7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79\"" error="reading from a closed fifo" Oct 2 19:15:49.129988 env[1130]: time="2023-10-02T19:15:49.129883979Z" level=error msg="Failed to pipe stdout of container \"7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79\"" error="reading from a closed fifo" Oct 2 19:15:49.132065 env[1130]: time="2023-10-02T19:15:49.132017232Z" level=error msg="StartContainer for \"7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:15:49.132272 kubelet[2058]: E1002 19:15:49.132240 2058 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79" Oct 2 19:15:49.132677 kubelet[2058]: E1002 19:15:49.132345 2058 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:15:49.132677 kubelet[2058]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:15:49.132677 kubelet[2058]: rm /hostbin/cilium-mount Oct 2 19:15:49.132677 kubelet[2058]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-29862,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-g2fss_kube-system(4015b2ed-ff4e-458f-b850-1891b77ea435): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:15:49.132900 kubelet[2058]: E1002 19:15:49.132381 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-g2fss" podUID=4015b2ed-ff4e-458f-b850-1891b77ea435 Oct 2 19:15:49.855589 kubelet[2058]: E1002 19:15:49.855521 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:15:49.858435 env[1130]: time="2023-10-02T19:15:49.858383308Z" level=info msg="CreateContainer within sandbox \"d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:15:49.873185 env[1130]: time="2023-10-02T19:15:49.873133768Z" level=info msg="CreateContainer within sandbox \"d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5\"" Oct 2 19:15:49.873634 env[1130]: time="2023-10-02T19:15:49.873597562Z" level=info msg="StartContainer for \"4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5\"" Oct 2 19:15:49.887948 systemd[1]: Started cri-containerd-4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5.scope. Oct 2 19:15:49.896038 systemd[1]: cri-containerd-4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5.scope: Deactivated successfully. Oct 2 19:15:49.896305 systemd[1]: Stopped cri-containerd-4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5.scope. Oct 2 19:15:49.903905 env[1130]: time="2023-10-02T19:15:49.903844704Z" level=info msg="shim disconnected" id=4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5 Oct 2 19:15:49.904060 env[1130]: time="2023-10-02T19:15:49.903909818Z" level=warning msg="cleaning up after shim disconnected" id=4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5 namespace=k8s.io Oct 2 19:15:49.904060 env[1130]: time="2023-10-02T19:15:49.903918985Z" level=info msg="cleaning up dead shim" Oct 2 19:15:49.910155 env[1130]: time="2023-10-02T19:15:49.910106693Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:15:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3214 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:15:49Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:15:49.910397 env[1130]: time="2023-10-02T19:15:49.910342472Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 19:15:49.910606 env[1130]: time="2023-10-02T19:15:49.910540329Z" level=error msg="Failed to pipe stdout of container \"4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5\"" error="reading from a closed fifo" Oct 2 19:15:49.910606 env[1130]: time="2023-10-02T19:15:49.910582319Z" level=error msg="Failed to pipe stderr of container \"4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5\"" error="reading from a closed fifo" Oct 2 19:15:49.912935 env[1130]: time="2023-10-02T19:15:49.912888824Z" level=error msg="StartContainer for \"4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:15:49.913092 kubelet[2058]: E1002 19:15:49.913070 2058 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5" Oct 2 19:15:49.913178 kubelet[2058]: E1002 19:15:49.913153 2058 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:15:49.913178 kubelet[2058]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:15:49.913178 kubelet[2058]: rm /hostbin/cilium-mount Oct 2 19:15:49.913178 kubelet[2058]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-29862,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-g2fss_kube-system(4015b2ed-ff4e-458f-b850-1891b77ea435): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:15:49.913358 kubelet[2058]: E1002 19:15:49.913183 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-g2fss" podUID=4015b2ed-ff4e-458f-b850-1891b77ea435 Oct 2 19:15:50.306169 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5-rootfs.mount: Deactivated successfully. Oct 2 19:15:50.857858 kubelet[2058]: I1002 19:15:50.857828 2058 scope.go:115] "RemoveContainer" containerID="7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79" Oct 2 19:15:50.858272 kubelet[2058]: I1002 19:15:50.858190 2058 scope.go:115] "RemoveContainer" containerID="7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79" Oct 2 19:15:50.859123 env[1130]: time="2023-10-02T19:15:50.859084973Z" level=info msg="RemoveContainer for \"7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79\"" Oct 2 19:15:50.859835 env[1130]: time="2023-10-02T19:15:50.859810445Z" level=info msg="RemoveContainer for \"7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79\"" Oct 2 19:15:50.859933 env[1130]: time="2023-10-02T19:15:50.859897761Z" level=error msg="RemoveContainer for \"7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79\" failed" error="failed to set removing state for container \"7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79\": container is already in removing state" Oct 2 19:15:50.860063 kubelet[2058]: E1002 19:15:50.860033 2058 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79\": container is already in removing state" containerID="7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79" Oct 2 19:15:50.860063 kubelet[2058]: E1002 19:15:50.860058 2058 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79": container is already in removing state; Skipping pod "cilium-g2fss_kube-system(4015b2ed-ff4e-458f-b850-1891b77ea435)" Oct 2 19:15:50.860184 kubelet[2058]: E1002 19:15:50.860129 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:15:50.860384 kubelet[2058]: E1002 19:15:50.860363 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-g2fss_kube-system(4015b2ed-ff4e-458f-b850-1891b77ea435)\"" pod="kube-system/cilium-g2fss" podUID=4015b2ed-ff4e-458f-b850-1891b77ea435 Oct 2 19:15:50.866116 env[1130]: time="2023-10-02T19:15:50.866060811Z" level=info msg="RemoveContainer for \"7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79\" returns successfully" Oct 2 19:15:51.503525 kubelet[2058]: E1002 19:15:51.503493 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:15:51.860734 kubelet[2058]: E1002 19:15:51.860614 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:15:51.861109 kubelet[2058]: E1002 19:15:51.860857 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-g2fss_kube-system(4015b2ed-ff4e-458f-b850-1891b77ea435)\"" pod="kube-system/cilium-g2fss" podUID=4015b2ed-ff4e-458f-b850-1891b77ea435 Oct 2 19:15:52.227510 kubelet[2058]: W1002 19:15:52.227465 2058 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4015b2ed_ff4e_458f_b850_1891b77ea435.slice/cri-containerd-7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79.scope WatchSource:0}: container "7a39f9b5cf7429db81ec62d7ab82f034d5322f72882a7a290382c9a177e37a79" in namespace "k8s.io": not found Oct 2 19:15:53.448264 kubelet[2058]: E1002 19:15:53.448227 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:15:55.332434 kubelet[2058]: W1002 19:15:55.332393 2058 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4015b2ed_ff4e_458f_b850_1891b77ea435.slice/cri-containerd-4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5.scope WatchSource:0}: task 4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5 not found: not found Oct 2 19:15:55.341254 kubelet[2058]: I1002 19:15:55.341231 2058 eviction_manager.go:345] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage" Oct 2 19:15:55.341254 kubelet[2058]: I1002 19:15:55.341257 2058 container_gc.go:86] "Attempting to delete unused containers" Oct 2 19:15:55.342220 env[1130]: time="2023-10-02T19:15:55.342188294Z" level=info msg="StopPodSandbox for \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\"" Oct 2 19:15:55.342496 env[1130]: time="2023-10-02T19:15:55.342268095Z" level=info msg="TearDown network for sandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" successfully" Oct 2 19:15:55.342496 env[1130]: time="2023-10-02T19:15:55.342297722Z" level=info msg="StopPodSandbox for \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" returns successfully" Oct 2 19:15:55.342657 env[1130]: time="2023-10-02T19:15:55.342635023Z" level=info msg="RemovePodSandbox for \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\"" Oct 2 19:15:55.342719 env[1130]: time="2023-10-02T19:15:55.342659751Z" level=info msg="Forcibly stopping sandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\"" Oct 2 19:15:55.342758 env[1130]: time="2023-10-02T19:15:55.342716489Z" level=info msg="TearDown network for sandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" successfully" Oct 2 19:15:55.345350 env[1130]: time="2023-10-02T19:15:55.345326316Z" level=info msg="RemovePodSandbox \"4eaadc60ee3ccc6a431cf2eba254c25e5120e019cc8b37215e9c1f2a0a3b672d\" returns successfully" Oct 2 19:15:55.345679 env[1130]: time="2023-10-02T19:15:55.345655122Z" level=info msg="StopPodSandbox for \"0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8\"" Oct 2 19:15:55.345758 env[1130]: time="2023-10-02T19:15:55.345720807Z" level=info msg="TearDown network for sandbox \"0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8\" successfully" Oct 2 19:15:55.345823 env[1130]: time="2023-10-02T19:15:55.345757768Z" level=info msg="StopPodSandbox for \"0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8\" returns successfully" Oct 2 19:15:55.346033 env[1130]: time="2023-10-02T19:15:55.346009477Z" level=info msg="RemovePodSandbox for \"0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8\"" Oct 2 19:15:55.346110 env[1130]: time="2023-10-02T19:15:55.346035677Z" level=info msg="Forcibly stopping sandbox \"0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8\"" Oct 2 19:15:55.346110 env[1130]: time="2023-10-02T19:15:55.346096092Z" level=info msg="TearDown network for sandbox \"0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8\" successfully" Oct 2 19:15:55.348725 env[1130]: time="2023-10-02T19:15:55.348699818Z" level=info msg="RemovePodSandbox \"0786eeccc9e09e337becb18c77b0e2c190e871a4ef3f8ffb4be50ef01764c0f8\" returns successfully" Oct 2 19:15:55.349115 kubelet[2058]: I1002 19:15:55.349089 2058 image_gc_manager.go:329] "Attempting to delete unused images" Oct 2 19:15:55.350438 kubelet[2058]: I1002 19:15:55.350416 2058 image_gc_manager.go:389] "Removing image to free bytes" imageID="sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c" size=18897442 Oct 2 19:15:55.350604 env[1130]: time="2023-10-02T19:15:55.350580337Z" level=info msg="RemoveImage \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:15:55.351616 env[1130]: time="2023-10-02T19:15:55.351590200Z" level=info msg="ImageDelete event &ImageDelete{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,XXX_unrecognized:[],}" Oct 2 19:15:55.352342 env[1130]: time="2023-10-02T19:15:55.352314028Z" level=info msg="ImageDelete event &ImageDelete{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,XXX_unrecognized:[],}" Oct 2 19:15:55.366252 env[1130]: time="2023-10-02T19:15:55.366193246Z" level=info msg="RemoveImage \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\" returns successfully" Oct 2 19:15:55.373976 kubelet[2058]: I1002 19:15:55.373947 2058 eviction_manager.go:352] "Eviction manager: able to reduce resource pressure without evicting pods." resourceName="ephemeral-storage" Oct 2 19:15:56.504574 kubelet[2058]: E1002 19:15:56.504541 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:15:57.384000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:57.385981 kernel: kauditd_printk_skb: 47 callbacks suppressed Oct 2 19:15:57.386052 kernel: audit: type=1400 audit(1696274157.384:1374): avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:57.384000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0023ecf60 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:15:57.391453 kernel: audit: type=1300 audit(1696274157.384:1374): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0023ecf60 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:15:57.391512 kernel: audit: type=1327 audit(1696274157.384:1374): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:57.384000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:57.394166 kernel: audit: type=1400 audit(1696274157.384:1375): avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:57.384000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:57.396471 kernel: audit: type=1300 audit(1696274157.384:1375): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0011936e0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:15:57.384000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0011936e0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:15:57.384000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:57.402328 kernel: audit: type=1327 audit(1696274157.384:1375): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:15:58.193000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:58.193000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:58.199003 kernel: audit: type=1400 audit(1696274158.193:1377): avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:58.199060 kernel: audit: type=1400 audit(1696274158.193:1376): avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7050 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:58.199088 kernel: audit: type=1300 audit(1696274158.193:1377): arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00489d900 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:15:58.193000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00489d900 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:15:58.193000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c00ef7a390 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:15:58.205180 kernel: audit: type=1300 audit(1696274158.193:1376): arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c00ef7a390 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:15:58.193000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:15:58.193000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:15:58.193000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7044 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:58.193000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00ed97710 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:15:58.193000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:15:58.193000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:58.193000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00ed97740 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:15:58.193000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:15:58.193000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:58.193000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c00ed977a0 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:15:58.193000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:15:58.193000 audit[1918]: AVC avc: denied { watch } for pid=1918 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:15:58.193000 audit[1918]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0041f3320 a2=fc6 a3=0 items=0 ppid=1772 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c388,c513 key=(null) Oct 2 19:15:58.193000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3635002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Oct 2 19:15:58.448349 kubelet[2058]: E1002 19:15:58.448219 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:16:01.065000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:01.065000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:01.065000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002698de0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:16:01.065000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002454da0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:16:01.065000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:01.065000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:01.065000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:01.065000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002454dc0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:16:01.065000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:01.066000 audit[1947]: AVC avc: denied { watch } for pid=1947 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6776 scontext=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:01.066000 audit[1947]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002454ee0 a2=fc6 a3=0 items=0 ppid=1786 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c353,c568 key=(null) Oct 2 19:16:01.066000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:01.505561 kubelet[2058]: E1002 19:16:01.505530 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:02.438622 update_engine[1120]: I1002 19:16:02.438565 1120 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:16:02.438622 update_engine[1120]: I1002 19:16:02.438602 1120 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:16:02.439346 update_engine[1120]: I1002 19:16:02.439321 1120 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:16:02.439664 update_engine[1120]: I1002 19:16:02.439640 1120 omaha_request_params.cc:62] Current group set to lts Oct 2 19:16:02.439827 update_engine[1120]: I1002 19:16:02.439814 1120 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:16:02.439827 update_engine[1120]: I1002 19:16:02.439826 1120 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:16:02.439899 update_engine[1120]: I1002 19:16:02.439841 1120 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:16:02.439899 update_engine[1120]: I1002 19:16:02.439875 1120 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:16:02.439939 update_engine[1120]: I1002 19:16:02.439924 1120 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:16:02.439939 update_engine[1120]: I1002 19:16:02.439927 1120 omaha_request_action.cc:269] Request: Oct 2 19:16:02.439939 update_engine[1120]: Oct 2 19:16:02.439939 update_engine[1120]: Oct 2 19:16:02.439939 update_engine[1120]: Oct 2 19:16:02.439939 update_engine[1120]: Oct 2 19:16:02.439939 update_engine[1120]: Oct 2 19:16:02.439939 update_engine[1120]: Oct 2 19:16:02.439939 update_engine[1120]: Oct 2 19:16:02.439939 update_engine[1120]: Oct 2 19:16:02.439939 update_engine[1120]: I1002 19:16:02.439932 1120 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:16:02.440146 locksmithd[1156]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:16:02.440745 update_engine[1120]: I1002 19:16:02.440726 1120 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:16:02.440914 update_engine[1120]: I1002 19:16:02.440897 1120 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:16:03.620855 update_engine[1120]: I1002 19:16:03.620770 1120 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 19:16:03.621232 update_engine[1120]: I1002 19:16:03.620968 1120 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 19:16:03.621232 update_engine[1120]: I1002 19:16:03.621050 1120 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 19:16:03.975152 update_engine[1120]: I1002 19:16:03.975088 1120 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 19:16:03.976612 update_engine[1120]: I1002 19:16:03.976585 1120 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 19:16:03.976612 update_engine[1120]: I1002 19:16:03.976601 1120 omaha_request_action.cc:619] Omaha request response: Oct 2 19:16:03.976612 update_engine[1120]: Oct 2 19:16:03.981564 update_engine[1120]: I1002 19:16:03.981514 1120 omaha_request_action.cc:409] No update. Oct 2 19:16:03.981564 update_engine[1120]: I1002 19:16:03.981554 1120 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 19:16:03.981564 update_engine[1120]: I1002 19:16:03.981560 1120 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 19:16:03.981564 update_engine[1120]: I1002 19:16:03.981564 1120 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 19:16:03.981564 update_engine[1120]: I1002 19:16:03.981567 1120 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 19:16:03.981564 update_engine[1120]: I1002 19:16:03.981571 1120 update_attempter.cc:302] Processing Done. Oct 2 19:16:03.981806 update_engine[1120]: I1002 19:16:03.981586 1120 update_attempter.cc:338] No update. Oct 2 19:16:03.981806 update_engine[1120]: I1002 19:16:03.981599 1120 update_check_scheduler.cc:74] Next update check in 48m17s Oct 2 19:16:03.982076 locksmithd[1156]: LastCheckedTime=1696274163 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 19:16:05.448334 kubelet[2058]: E1002 19:16:05.448273 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:16:05.471368 env[1130]: time="2023-10-02T19:16:05.450662373Z" level=info msg="CreateContainer within sandbox \"d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:16:05.485062 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3753321505.mount: Deactivated successfully. Oct 2 19:16:05.489776 env[1130]: time="2023-10-02T19:16:05.489723484Z" level=info msg="CreateContainer within sandbox \"d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25\"" Oct 2 19:16:05.490415 env[1130]: time="2023-10-02T19:16:05.490371256Z" level=info msg="StartContainer for \"41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25\"" Oct 2 19:16:05.509397 systemd[1]: Started cri-containerd-41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25.scope. Oct 2 19:16:05.518133 systemd[1]: cri-containerd-41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25.scope: Deactivated successfully. Oct 2 19:16:05.518363 systemd[1]: Stopped cri-containerd-41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25.scope. Oct 2 19:16:05.527636 env[1130]: time="2023-10-02T19:16:05.527572953Z" level=info msg="shim disconnected" id=41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25 Oct 2 19:16:05.527773 env[1130]: time="2023-10-02T19:16:05.527641353Z" level=warning msg="cleaning up after shim disconnected" id=41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25 namespace=k8s.io Oct 2 19:16:05.527773 env[1130]: time="2023-10-02T19:16:05.527654248Z" level=info msg="cleaning up dead shim" Oct 2 19:16:05.534429 env[1130]: time="2023-10-02T19:16:05.534364595Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:16:05Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3254 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:16:05Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:16:05.534673 env[1130]: time="2023-10-02T19:16:05.534614671Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 19:16:05.536490 env[1130]: time="2023-10-02T19:16:05.536449198Z" level=error msg="Failed to pipe stdout of container \"41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25\"" error="reading from a closed fifo" Oct 2 19:16:05.536565 env[1130]: time="2023-10-02T19:16:05.536519352Z" level=error msg="Failed to pipe stderr of container \"41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25\"" error="reading from a closed fifo" Oct 2 19:16:05.539447 env[1130]: time="2023-10-02T19:16:05.539396131Z" level=error msg="StartContainer for \"41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:16:05.539673 kubelet[2058]: E1002 19:16:05.539639 2058 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25" Oct 2 19:16:05.539868 kubelet[2058]: E1002 19:16:05.539752 2058 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:16:05.539868 kubelet[2058]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:16:05.539868 kubelet[2058]: rm /hostbin/cilium-mount Oct 2 19:16:05.539868 kubelet[2058]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-29862,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-g2fss_kube-system(4015b2ed-ff4e-458f-b850-1891b77ea435): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:16:05.540012 kubelet[2058]: E1002 19:16:05.539802 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-g2fss" podUID=4015b2ed-ff4e-458f-b850-1891b77ea435 Oct 2 19:16:05.884139 kubelet[2058]: I1002 19:16:05.884029 2058 scope.go:115] "RemoveContainer" containerID="4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5" Oct 2 19:16:05.884452 kubelet[2058]: I1002 19:16:05.884420 2058 scope.go:115] "RemoveContainer" containerID="4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5" Oct 2 19:16:05.885435 env[1130]: time="2023-10-02T19:16:05.885398303Z" level=info msg="RemoveContainer for \"4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5\"" Oct 2 19:16:05.885949 env[1130]: time="2023-10-02T19:16:05.885916549Z" level=info msg="RemoveContainer for \"4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5\"" Oct 2 19:16:05.886050 env[1130]: time="2023-10-02T19:16:05.886014635Z" level=error msg="RemoveContainer for \"4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5\" failed" error="failed to set removing state for container \"4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5\": container is already in removing state" Oct 2 19:16:05.886180 kubelet[2058]: E1002 19:16:05.886160 2058 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5\": container is already in removing state" containerID="4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5" Oct 2 19:16:05.886243 kubelet[2058]: E1002 19:16:05.886186 2058 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5": container is already in removing state; Skipping pod "cilium-g2fss_kube-system(4015b2ed-ff4e-458f-b850-1891b77ea435)" Oct 2 19:16:05.886243 kubelet[2058]: E1002 19:16:05.886240 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:16:05.886471 kubelet[2058]: E1002 19:16:05.886456 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-g2fss_kube-system(4015b2ed-ff4e-458f-b850-1891b77ea435)\"" pod="kube-system/cilium-g2fss" podUID=4015b2ed-ff4e-458f-b850-1891b77ea435 Oct 2 19:16:05.889184 env[1130]: time="2023-10-02T19:16:05.889132873Z" level=info msg="RemoveContainer for \"4323ee39454f8edc5d9f3a601127819dcc006870eab9a7f852c139983cf5e8f5\" returns successfully" Oct 2 19:16:06.448301 kubelet[2058]: E1002 19:16:06.448260 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:16:06.482640 systemd[1]: run-containerd-runc-k8s.io-41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25-runc.oZiLMP.mount: Deactivated successfully. Oct 2 19:16:06.482754 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25-rootfs.mount: Deactivated successfully. Oct 2 19:16:06.506423 kubelet[2058]: E1002 19:16:06.506390 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:08.633381 kubelet[2058]: W1002 19:16:08.633328 2058 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4015b2ed_ff4e_458f_b850_1891b77ea435.slice/cri-containerd-41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25.scope WatchSource:0}: task 41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25 not found: not found Oct 2 19:16:11.507956 kubelet[2058]: E1002 19:16:11.507921 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:16.508741 kubelet[2058]: E1002 19:16:16.508705 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:17.449058 kubelet[2058]: E1002 19:16:17.449007 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:16:17.449315 kubelet[2058]: E1002 19:16:17.449275 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-g2fss_kube-system(4015b2ed-ff4e-458f-b850-1891b77ea435)\"" pod="kube-system/cilium-g2fss" podUID=4015b2ed-ff4e-458f-b850-1891b77ea435 Oct 2 19:16:21.509709 kubelet[2058]: E1002 19:16:21.509676 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:26.510776 kubelet[2058]: E1002 19:16:26.510715 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:31.447532 kubelet[2058]: E1002 19:16:31.447497 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:16:31.449450 env[1130]: time="2023-10-02T19:16:31.449401583Z" level=info msg="CreateContainer within sandbox \"d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:16:31.461898 env[1130]: time="2023-10-02T19:16:31.461851446Z" level=info msg="CreateContainer within sandbox \"d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832\"" Oct 2 19:16:31.462340 env[1130]: time="2023-10-02T19:16:31.462315326Z" level=info msg="StartContainer for \"0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832\"" Oct 2 19:16:31.476573 systemd[1]: Started cri-containerd-0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832.scope. Oct 2 19:16:31.484230 systemd[1]: cri-containerd-0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832.scope: Deactivated successfully. Oct 2 19:16:31.484562 systemd[1]: Stopped cri-containerd-0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832.scope. Oct 2 19:16:31.487769 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832-rootfs.mount: Deactivated successfully. Oct 2 19:16:31.493636 env[1130]: time="2023-10-02T19:16:31.493582929Z" level=info msg="shim disconnected" id=0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832 Oct 2 19:16:31.493838 env[1130]: time="2023-10-02T19:16:31.493636571Z" level=warning msg="cleaning up after shim disconnected" id=0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832 namespace=k8s.io Oct 2 19:16:31.493838 env[1130]: time="2023-10-02T19:16:31.493646640Z" level=info msg="cleaning up dead shim" Oct 2 19:16:31.500520 env[1130]: time="2023-10-02T19:16:31.500463379Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:16:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3291 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:16:31Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:16:31.500804 env[1130]: time="2023-10-02T19:16:31.500725406Z" level=error msg="copy shim log" error="read /proc/self/fd/38: file already closed" Oct 2 19:16:31.500964 env[1130]: time="2023-10-02T19:16:31.500924494Z" level=error msg="Failed to pipe stdout of container \"0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832\"" error="reading from a closed fifo" Oct 2 19:16:31.501030 env[1130]: time="2023-10-02T19:16:31.500951234Z" level=error msg="Failed to pipe stderr of container \"0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832\"" error="reading from a closed fifo" Oct 2 19:16:31.502996 env[1130]: time="2023-10-02T19:16:31.502959994Z" level=error msg="StartContainer for \"0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:16:31.503192 kubelet[2058]: E1002 19:16:31.503165 2058 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832" Oct 2 19:16:31.503329 kubelet[2058]: E1002 19:16:31.503298 2058 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:16:31.503329 kubelet[2058]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:16:31.503329 kubelet[2058]: rm /hostbin/cilium-mount Oct 2 19:16:31.503329 kubelet[2058]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-29862,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-g2fss_kube-system(4015b2ed-ff4e-458f-b850-1891b77ea435): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:16:31.503516 kubelet[2058]: E1002 19:16:31.503353 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-g2fss" podUID=4015b2ed-ff4e-458f-b850-1891b77ea435 Oct 2 19:16:31.511544 kubelet[2058]: E1002 19:16:31.511519 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:31.930091 kubelet[2058]: I1002 19:16:31.930053 2058 scope.go:115] "RemoveContainer" containerID="41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25" Oct 2 19:16:31.930463 kubelet[2058]: I1002 19:16:31.930430 2058 scope.go:115] "RemoveContainer" containerID="41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25" Oct 2 19:16:31.931118 env[1130]: time="2023-10-02T19:16:31.931084587Z" level=info msg="RemoveContainer for \"41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25\"" Oct 2 19:16:31.931402 env[1130]: time="2023-10-02T19:16:31.931368235Z" level=info msg="RemoveContainer for \"41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25\"" Oct 2 19:16:31.931483 env[1130]: time="2023-10-02T19:16:31.931439089Z" level=error msg="RemoveContainer for \"41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25\" failed" error="failed to set removing state for container \"41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25\": container is already in removing state" Oct 2 19:16:31.931632 kubelet[2058]: E1002 19:16:31.931614 2058 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25\": container is already in removing state" containerID="41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25" Oct 2 19:16:31.931692 kubelet[2058]: E1002 19:16:31.931646 2058 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25": container is already in removing state; Skipping pod "cilium-g2fss_kube-system(4015b2ed-ff4e-458f-b850-1891b77ea435)" Oct 2 19:16:31.931742 kubelet[2058]: E1002 19:16:31.931714 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:16:31.931994 kubelet[2058]: E1002 19:16:31.931975 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-g2fss_kube-system(4015b2ed-ff4e-458f-b850-1891b77ea435)\"" pod="kube-system/cilium-g2fss" podUID=4015b2ed-ff4e-458f-b850-1891b77ea435 Oct 2 19:16:32.182490 env[1130]: time="2023-10-02T19:16:32.182353450Z" level=info msg="RemoveContainer for \"41c7ec2b53cd16033eae81d5677e39c7174beca691db2a1fcda56b2a54b7fe25\" returns successfully" Oct 2 19:16:34.598273 kubelet[2058]: W1002 19:16:34.598232 2058 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4015b2ed_ff4e_458f_b850_1891b77ea435.slice/cri-containerd-0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832.scope WatchSource:0}: task 0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832 not found: not found Oct 2 19:16:36.512457 kubelet[2058]: E1002 19:16:36.512425 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:41.513455 kubelet[2058]: E1002 19:16:41.513418 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:46.448141 kubelet[2058]: E1002 19:16:46.448111 2058 dns.go:156] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Oct 2 19:16:46.448527 kubelet[2058]: E1002 19:16:46.448369 2058 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-g2fss_kube-system(4015b2ed-ff4e-458f-b850-1891b77ea435)\"" pod="kube-system/cilium-g2fss" podUID=4015b2ed-ff4e-458f-b850-1891b77ea435 Oct 2 19:16:46.514411 kubelet[2058]: E1002 19:16:46.514382 2058 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:49.471876 env[1130]: time="2023-10-02T19:16:49.471829955Z" level=info msg="StopPodSandbox for \"d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a\"" Oct 2 19:16:49.472443 env[1130]: time="2023-10-02T19:16:49.472401578Z" level=info msg="Container to stop \"0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:16:49.473818 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a-shm.mount: Deactivated successfully. Oct 2 19:16:49.486186 systemd[1]: cri-containerd-d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a.scope: Deactivated successfully. Oct 2 19:16:49.485000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:16:49.488445 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 19:16:49.488514 kernel: audit: type=1334 audit(1696274209.485:1386): prog-id=131 op=UNLOAD Oct 2 19:16:49.491000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:16:49.492807 kernel: audit: type=1334 audit(1696274209.491:1387): prog-id=134 op=UNLOAD Oct 2 19:16:49.506874 sshd[3097]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:49.513195 kernel: audit: type=1106 audit(1696274209.507:1388): pid=3097 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:16:49.513295 kernel: audit: type=1104 audit(1696274209.507:1389): pid=3097 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:16:49.507000 audit[3097]: USER_END pid=3097 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:16:49.507000 audit[3097]: CRED_DISP pid=3097 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Oct 2 19:16:49.511298 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a-rootfs.mount: Deactivated successfully. Oct 2 19:16:49.512078 systemd[1]: sshd@29-10.0.0.65:22-10.0.0.1:59226.service: Deactivated successfully. Oct 2 19:16:49.512822 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:16:49.514449 systemd-logind[1117]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:16:49.511000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.65:22-10.0.0.1:59226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:49.515337 systemd-logind[1117]: Removed session 30. Oct 2 19:16:49.519037 kernel: audit: type=1131 audit(1696274209.511:1390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.0.0.65:22-10.0.0.1:59226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:49.537421 env[1130]: time="2023-10-02T19:16:49.537341833Z" level=info msg="shim disconnected" id=d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a Oct 2 19:16:49.537421 env[1130]: time="2023-10-02T19:16:49.537397890Z" level=warning msg="cleaning up after shim disconnected" id=d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a namespace=k8s.io Oct 2 19:16:49.537421 env[1130]: time="2023-10-02T19:16:49.537407758Z" level=info msg="cleaning up dead shim" Oct 2 19:16:49.544227 env[1130]: time="2023-10-02T19:16:49.544190167Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:16:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3326 runtime=io.containerd.runc.v2\n" Oct 2 19:16:49.544644 env[1130]: time="2023-10-02T19:16:49.544620673Z" level=info msg="TearDown network for sandbox \"d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a\" successfully" Oct 2 19:16:49.544726 env[1130]: time="2023-10-02T19:16:49.544706425Z" level=info msg="StopPodSandbox for \"d153745ba96a71481f3d77724557b9ae430c4ce0286b416316808a02baa0788a\" returns successfully" Oct 2 19:16:49.732674 kubelet[2058]: I1002 19:16:49.732533 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-29862\" (UniqueName: \"kubernetes.io/projected/4015b2ed-ff4e-458f-b850-1891b77ea435-kube-api-access-29862\") pod \"4015b2ed-ff4e-458f-b850-1891b77ea435\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " Oct 2 19:16:49.732674 kubelet[2058]: I1002 19:16:49.732603 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4015b2ed-ff4e-458f-b850-1891b77ea435-cilium-config-path\") pod \"4015b2ed-ff4e-458f-b850-1891b77ea435\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " Oct 2 19:16:49.732674 kubelet[2058]: I1002 19:16:49.732632 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/4015b2ed-ff4e-458f-b850-1891b77ea435-clustermesh-secrets\") pod \"4015b2ed-ff4e-458f-b850-1891b77ea435\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " Oct 2 19:16:49.732674 kubelet[2058]: I1002 19:16:49.732658 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-xtables-lock\") pod \"4015b2ed-ff4e-458f-b850-1891b77ea435\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " Oct 2 19:16:49.732674 kubelet[2058]: I1002 19:16:49.732686 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/4015b2ed-ff4e-458f-b850-1891b77ea435-cilium-ipsec-secrets\") pod \"4015b2ed-ff4e-458f-b850-1891b77ea435\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " Oct 2 19:16:49.733149 kubelet[2058]: I1002 19:16:49.732708 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-cilium-cgroup\") pod \"4015b2ed-ff4e-458f-b850-1891b77ea435\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " Oct 2 19:16:49.733149 kubelet[2058]: I1002 19:16:49.732729 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-cni-path\") pod \"4015b2ed-ff4e-458f-b850-1891b77ea435\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " Oct 2 19:16:49.733149 kubelet[2058]: I1002 19:16:49.732753 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-host-proc-sys-kernel\") pod \"4015b2ed-ff4e-458f-b850-1891b77ea435\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " Oct 2 19:16:49.733149 kubelet[2058]: I1002 19:16:49.732775 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-etc-cni-netd\") pod \"4015b2ed-ff4e-458f-b850-1891b77ea435\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " Oct 2 19:16:49.733149 kubelet[2058]: I1002 19:16:49.732823 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/4015b2ed-ff4e-458f-b850-1891b77ea435-hubble-tls\") pod \"4015b2ed-ff4e-458f-b850-1891b77ea435\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " Oct 2 19:16:49.733149 kubelet[2058]: I1002 19:16:49.732845 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-bpf-maps\") pod \"4015b2ed-ff4e-458f-b850-1891b77ea435\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " Oct 2 19:16:49.733305 kubelet[2058]: I1002 19:16:49.732868 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-host-proc-sys-net\") pod \"4015b2ed-ff4e-458f-b850-1891b77ea435\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " Oct 2 19:16:49.733305 kubelet[2058]: I1002 19:16:49.732890 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-cilium-run\") pod \"4015b2ed-ff4e-458f-b850-1891b77ea435\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " Oct 2 19:16:49.733305 kubelet[2058]: I1002 19:16:49.732911 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-hostproc\") pod \"4015b2ed-ff4e-458f-b850-1891b77ea435\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " Oct 2 19:16:49.733305 kubelet[2058]: I1002 19:16:49.732932 2058 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-lib-modules\") pod \"4015b2ed-ff4e-458f-b850-1891b77ea435\" (UID: \"4015b2ed-ff4e-458f-b850-1891b77ea435\") " Oct 2 19:16:49.733305 kubelet[2058]: I1002 19:16:49.732935 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-cni-path" (OuterVolumeSpecName: "cni-path") pod "4015b2ed-ff4e-458f-b850-1891b77ea435" (UID: "4015b2ed-ff4e-458f-b850-1891b77ea435"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:16:49.733305 kubelet[2058]: I1002 19:16:49.732983 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "4015b2ed-ff4e-458f-b850-1891b77ea435" (UID: "4015b2ed-ff4e-458f-b850-1891b77ea435"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:16:49.733463 kubelet[2058]: I1002 19:16:49.733014 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "4015b2ed-ff4e-458f-b850-1891b77ea435" (UID: "4015b2ed-ff4e-458f-b850-1891b77ea435"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:16:49.733463 kubelet[2058]: I1002 19:16:49.733033 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "4015b2ed-ff4e-458f-b850-1891b77ea435" (UID: "4015b2ed-ff4e-458f-b850-1891b77ea435"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:16:49.733463 kubelet[2058]: W1002 19:16:49.733085 2058 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/4015b2ed-ff4e-458f-b850-1891b77ea435/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:16:49.734265 kubelet[2058]: I1002 19:16:49.733573 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "4015b2ed-ff4e-458f-b850-1891b77ea435" (UID: "4015b2ed-ff4e-458f-b850-1891b77ea435"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:16:49.734265 kubelet[2058]: I1002 19:16:49.733611 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "4015b2ed-ff4e-458f-b850-1891b77ea435" (UID: "4015b2ed-ff4e-458f-b850-1891b77ea435"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:16:49.734265 kubelet[2058]: I1002 19:16:49.733627 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "4015b2ed-ff4e-458f-b850-1891b77ea435" (UID: "4015b2ed-ff4e-458f-b850-1891b77ea435"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:16:49.734265 kubelet[2058]: I1002 19:16:49.733748 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "4015b2ed-ff4e-458f-b850-1891b77ea435" (UID: "4015b2ed-ff4e-458f-b850-1891b77ea435"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:16:49.734265 kubelet[2058]: I1002 19:16:49.733770 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-hostproc" (OuterVolumeSpecName: "hostproc") pod "4015b2ed-ff4e-458f-b850-1891b77ea435" (UID: "4015b2ed-ff4e-458f-b850-1891b77ea435"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:16:49.734450 kubelet[2058]: I1002 19:16:49.733955 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "4015b2ed-ff4e-458f-b850-1891b77ea435" (UID: "4015b2ed-ff4e-458f-b850-1891b77ea435"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:16:49.735470 kubelet[2058]: I1002 19:16:49.735391 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/4015b2ed-ff4e-458f-b850-1891b77ea435-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "4015b2ed-ff4e-458f-b850-1891b77ea435" (UID: "4015b2ed-ff4e-458f-b850-1891b77ea435"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:16:49.736940 systemd[1]: var-lib-kubelet-pods-4015b2ed\x2dff4e\x2d458f\x2db850\x2d1891b77ea435-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:16:49.737605 kubelet[2058]: I1002 19:16:49.737572 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/4015b2ed-ff4e-458f-b850-1891b77ea435-kube-api-access-29862" (OuterVolumeSpecName: "kube-api-access-29862") pod "4015b2ed-ff4e-458f-b850-1891b77ea435" (UID: "4015b2ed-ff4e-458f-b850-1891b77ea435"). InnerVolumeSpecName "kube-api-access-29862". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:16:49.737686 kubelet[2058]: I1002 19:16:49.737666 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/4015b2ed-ff4e-458f-b850-1891b77ea435-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "4015b2ed-ff4e-458f-b850-1891b77ea435" (UID: "4015b2ed-ff4e-458f-b850-1891b77ea435"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:16:49.738108 kubelet[2058]: I1002 19:16:49.738086 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/4015b2ed-ff4e-458f-b850-1891b77ea435-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "4015b2ed-ff4e-458f-b850-1891b77ea435" (UID: "4015b2ed-ff4e-458f-b850-1891b77ea435"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:16:49.738442 kubelet[2058]: I1002 19:16:49.738425 2058 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/4015b2ed-ff4e-458f-b850-1891b77ea435-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "4015b2ed-ff4e-458f-b850-1891b77ea435" (UID: "4015b2ed-ff4e-458f-b850-1891b77ea435"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:16:49.738701 systemd[1]: var-lib-kubelet-pods-4015b2ed\x2dff4e\x2d458f\x2db850\x2d1891b77ea435-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d29862.mount: Deactivated successfully. Oct 2 19:16:49.738815 systemd[1]: var-lib-kubelet-pods-4015b2ed\x2dff4e\x2d458f\x2db850\x2d1891b77ea435-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:16:49.738886 systemd[1]: var-lib-kubelet-pods-4015b2ed\x2dff4e\x2d458f\x2db850\x2d1891b77ea435-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:16:49.833500 kubelet[2058]: I1002 19:16:49.833450 2058 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-lib-modules\") on node \"localhost\" DevicePath \"\"" Oct 2 19:16:49.833500 kubelet[2058]: I1002 19:16:49.833487 2058 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-29862\" (UniqueName: \"kubernetes.io/projected/4015b2ed-ff4e-458f-b850-1891b77ea435-kube-api-access-29862\") on node \"localhost\" DevicePath \"\"" Oct 2 19:16:49.833500 kubelet[2058]: I1002 19:16:49.833497 2058 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4015b2ed-ff4e-458f-b850-1891b77ea435-cilium-config-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:16:49.833500 kubelet[2058]: I1002 19:16:49.833508 2058 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/4015b2ed-ff4e-458f-b850-1891b77ea435-clustermesh-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:16:49.833747 kubelet[2058]: I1002 19:16:49.833518 2058 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-xtables-lock\") on node \"localhost\" DevicePath \"\"" Oct 2 19:16:49.833747 kubelet[2058]: I1002 19:16:49.833527 2058 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-cni-path\") on node \"localhost\" DevicePath \"\"" Oct 2 19:16:49.833747 kubelet[2058]: I1002 19:16:49.833535 2058 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-host-proc-sys-kernel\") on node \"localhost\" DevicePath \"\"" Oct 2 19:16:49.833747 kubelet[2058]: I1002 19:16:49.833544 2058 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/4015b2ed-ff4e-458f-b850-1891b77ea435-cilium-ipsec-secrets\") on node \"localhost\" DevicePath \"\"" Oct 2 19:16:49.833747 kubelet[2058]: I1002 19:16:49.833555 2058 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-cilium-cgroup\") on node \"localhost\" DevicePath \"\"" Oct 2 19:16:49.833747 kubelet[2058]: I1002 19:16:49.833564 2058 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-etc-cni-netd\") on node \"localhost\" DevicePath \"\"" Oct 2 19:16:49.833747 kubelet[2058]: I1002 19:16:49.833573 2058 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/4015b2ed-ff4e-458f-b850-1891b77ea435-hubble-tls\") on node \"localhost\" DevicePath \"\"" Oct 2 19:16:49.833747 kubelet[2058]: I1002 19:16:49.833584 2058 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-bpf-maps\") on node \"localhost\" DevicePath \"\"" Oct 2 19:16:49.833948 kubelet[2058]: I1002 19:16:49.833601 2058 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-host-proc-sys-net\") on node \"localhost\" DevicePath \"\"" Oct 2 19:16:49.833948 kubelet[2058]: I1002 19:16:49.833609 2058 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-cilium-run\") on node \"localhost\" DevicePath \"\"" Oct 2 19:16:49.833948 kubelet[2058]: I1002 19:16:49.833617 2058 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/4015b2ed-ff4e-458f-b850-1891b77ea435-hostproc\") on node \"localhost\" DevicePath \"\"" Oct 2 19:16:49.964574 kubelet[2058]: I1002 19:16:49.964544 2058 scope.go:115] "RemoveContainer" containerID="0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832" Oct 2 19:16:49.965313 env[1130]: time="2023-10-02T19:16:49.965279536Z" level=info msg="RemoveContainer for \"0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832\"" Oct 2 19:16:49.967564 systemd[1]: Removed slice kubepods-burstable-pod4015b2ed_ff4e_458f_b850_1891b77ea435.slice. Oct 2 19:16:50.014906 env[1130]: time="2023-10-02T19:16:50.014802683Z" level=info msg="RemoveContainer for \"0d46a73556578e6fa0527e5b36c7dd3a6a9552ae562085f169d0040ecc740832\" returns successfully"